last executing test programs: 1m18.610212736s ago: executing program 1 (id=979): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x14, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000180), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) 1m18.455924404s ago: executing program 1 (id=981): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2000001f, 0x1) r1 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40012140, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x208c1, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000001000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}], 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 1m18.200530964s ago: executing program 1 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2, @ANYBLOB="395059ddefb2a20bc379e132061a4c0c9dc1815c2364bd8efd817b4b1c6d3e3282fb412b0ba08c3f19ebb6d76c14d9c45fda7458c76cbff52b87fa99f336776dc612daee3f42cc505acb7b665d320ccfb99ba396f36d66ec9f800d529fffbd2cbf728db362f0900d0a22699f8e8a30c0063fb164c90b2b29ca7c007eee9f0c3cbd0060bba19f860f81bcd8da2d025bf2dee03a807a7a09a255ceba6fe50999cb538d49872747876106e0b5a764"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) close(0xffffffffffffffff) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x2, 0x0, 0xffffffff, 0x10022, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, &(0x7f00000003c0)=""/219, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000340)="747369587e0a4e47adce", 0xa}], 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x880) sync() sync() 58.130976498s ago: executing program 1 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2, @ANYBLOB="395059ddefb2a20bc379e132061a4c0c9dc1815c2364bd8efd817b4b1c6d3e3282fb412b0ba08c3f19ebb6d76c14d9c45fda7458c76cbff52b87fa99f336776dc612daee3f42cc505acb7b665d320ccfb99ba396f36d66ec9f800d529fffbd2cbf728db362f0900d0a22699f8e8a30c0063fb164c90b2b29ca7c007eee9f0c3cbd0060bba19f860f81bcd8da2d025bf2dee03a807a7a09a255ceba6fe50999cb538d49872747876106e0b5a764"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) close(0xffffffffffffffff) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x2, 0x0, 0xffffffff, 0x10022, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, &(0x7f00000003c0)=""/219, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000340)="747369587e0a4e47adce", 0xa}], 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x880) sync() sync() 49.713816676s ago: executing program 4 (id=1073): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) (async) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x0) lseek(r1, 0x4, 0x2) getdents64(r1, 0xffffffffffffffff, 0x43) 49.542479882s ago: executing program 4 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="3dd40b0ab283fedc21ba6ebdff7df3ad384f930d20cd1ff272ca318ca2e938eb3d77e77837e6e60b90ddd2c55f3d388aca9c13ba341debba5b", @ANYRES32=r1, @ANYBLOB="02", @ANYRES64=r0], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000"], 0x10) r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x2241) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0xc2, 0x2}, 0x3}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 49.283314966s ago: executing program 4 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x8, 0xfd, 0x1, 0x0, 0x2, 0x3200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0xc040) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x13) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x97) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000000, 0xffff7c56, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x1, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') 48.78317791s ago: executing program 4 (id=1080): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000001440)=ANY=[], 0xffffff6a) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r7, 0xfffffffffffffc01, 0x0) tee(r4, r7, 0x60000000000, 0x0) 31.273552482s ago: executing program 1 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2, @ANYBLOB="395059ddefb2a20bc379e132061a4c0c9dc1815c2364bd8efd817b4b1c6d3e3282fb412b0ba08c3f19ebb6d76c14d9c45fda7458c76cbff52b87fa99f336776dc612daee3f42cc505acb7b665d320ccfb99ba396f36d66ec9f800d529fffbd2cbf728db362f0900d0a22699f8e8a30c0063fb164c90b2b29ca7c007eee9f0c3cbd0060bba19f860f81bcd8da2d025bf2dee03a807a7a09a255ceba6fe50999cb538d49872747876106e0b5a764"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) close(0xffffffffffffffff) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x2, 0x0, 0xffffffff, 0x10022, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, &(0x7f00000003c0)=""/219, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000340)="747369587e0a4e47adce", 0xa}], 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x880) sync() sync() 30.396086774s ago: executing program 4 (id=1080): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000001440)=ANY=[], 0xffffff6a) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r7, 0xfffffffffffffc01, 0x0) tee(r4, r7, 0x60000000000, 0x0) 12.189417485s ago: executing program 1 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2, @ANYBLOB="395059ddefb2a20bc379e132061a4c0c9dc1815c2364bd8efd817b4b1c6d3e3282fb412b0ba08c3f19ebb6d76c14d9c45fda7458c76cbff52b87fa99f336776dc612daee3f42cc505acb7b665d320ccfb99ba396f36d66ec9f800d529fffbd2cbf728db362f0900d0a22699f8e8a30c0063fb164c90b2b29ca7c007eee9f0c3cbd0060bba19f860f81bcd8da2d025bf2dee03a807a7a09a255ceba6fe50999cb538d49872747876106e0b5a764"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) close(0xffffffffffffffff) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x2, 0x0, 0xffffffff, 0x10022, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, &(0x7f00000003c0)=""/219, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000340)="747369587e0a4e47adce", 0xa}], 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x880) sync() sync() 11.516759957s ago: executing program 2 (id=1175): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000a3a000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcbd2e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7) write$tun(0xffffffffffffffff, 0x0, 0x2a) unshare(0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_clone(0x10002000, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x87) setsockopt$inet_buf(r4, 0x0, 0x9, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x24f5, &(0x7f00000002c0)={0x0, 0x4, 0x1, 0x1, 0x33}, 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 11.511752225s ago: executing program 4 (id=1080): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000001440)=ANY=[], 0xffffff6a) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r7, 0xfffffffffffffc01, 0x0) tee(r4, r7, 0x60000000000, 0x0) 10.166612943s ago: executing program 2 (id=1179): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x1000)=nil, &(0x7f0000c87000/0x2000)=nil, 0xfffffffffffffffd, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x361, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001"], 0x118}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0x400, 0x2, 0x1c7, 0x6, 0x4, 0x2]}, &(0x7f0000000080)=0x78) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x27a300, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.813150323s ago: executing program 2 (id=1182): r0 = socket(0x10, 0x800, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x28, 0x30, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.647392355s ago: executing program 2 (id=1183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001340)={0xf, {"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", 0x1000}}, 0x1006) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000080)={0x28, 0x1, 0x0, 0x0, &(0x7f0000000300)="e122e102899428f6a4013f0fb1b05c4e2f683e0249690369546a6ee2fad215766f9f81cfad975a59f6c907b0c4c59a3e23d04c818e2bf5305a4096951500d8e8067541f49503955db57e8ab39f203940bf077f83a4f5a53ac7e8a3f3cb590d153c827bd6b91dd1b604ed6768cbddf5322ad9cb686a0e3ad0e295a0e6", 0x7c, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r3}, 0x10) setresgid(0xee00, 0xee01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000180)=""/135) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) recvmmsg(r0, 0x0, 0x0, 0x40012064, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x832900, 0x400000) 7.263554485s ago: executing program 0 (id=1186): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000400304c19700000000000109022e00010000002009040082010300000009210101000022050009058103"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x6b0240, 0x102) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002005b797a3100000000080041007369770014003300626f6e64300000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e", @ANYBLOB="0400130006001200000000000600b5008501"], 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) getpeername$inet6(r4, 0x0, &(0x7f0000000140)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x10) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x40200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) 6.694360044s ago: executing program 3 (id=1188): r0 = socket$phonet(0x23, 0x2, 0x1) setresuid(0x0, 0xee00, 0x0) (async) setresuid(0x0, 0xee00, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000240)) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000029000000020000000000000000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100010000"], 0x6b}, 0xfc00) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000001100)=0x2, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000001100)=0x2, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000055ffdf08860500102a050102030109020a00"], 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000001340)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x7, {{0x19, 0x4, 0x0, 0x3, 0x64, 0x68, 0x0, 0x0, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x10, "2ada58affd7b639e1eb52961ec2b"}, @timestamp={0x44, 0x2c, 0x7a, 0x0, 0x9, [0x0, 0x7f, 0x0, 0x9, 0xffff7fff, 0x59a, 0x8000, 0x3, 0xfdb, 0x3]}, @ssrr={0x89, 0x13, 0xf4, [@multicast1, @empty, @multicast1, @rand_addr=0x64010101]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000001340)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x7, 0x7, {{0x19, 0x4, 0x0, 0x3, 0x64, 0x68, 0x0, 0x0, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x10, "2ada58affd7b639e1eb52961ec2b"}, @timestamp={0x44, 0x2c, 0x7a, 0x0, 0x9, [0x0, 0x7f, 0x0, 0x9, 0xffff7fff, 0x59a, 0x8000, 0x3, 0xfdb, 0x3]}, @ssrr={0x89, 0x13, 0xf4, [@multicast1, @empty, @multicast1, @rand_addr=0x64010101]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=@mpls_getroute={0x38, 0x1a, 0x400, 0x70bd2b, 0x25dfdbfd, {0x1c, 0x10, 0x0, 0x2, 0xff, 0x3, 0xc8, 0x8, 0x900}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x11, 0xb, r3}}, @RTA_DST={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001140)=0x0) sched_setaffinity(r4, 0x8, &(0x7f0000001400)=0x7) 6.099147998s ago: executing program 3 (id=1189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$userns(r0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@setneightbl={0x28, 0x43, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NDTA_NAME={0x12, 0x1, ')&}+(]&\'.-$+:\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000d0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x1800}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 5.130545647s ago: executing program 0 (id=1190): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x20004f) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2ac00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f00000002c0)=0x19) read$dsp(r7, &(0x7f0000000300)=""/175, 0xaf) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) write$sndseq(r10, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.800251562s ago: executing program 3 (id=1191): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0xffffffff, 0x100) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$evdev(r5, &(0x7f00000001c0)=[{{}, 0x2, 0x8, 0x3}], 0x18) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r7, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000401}, 0x44040) socket$xdp(0x2c, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x327101, 0x0) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 4.141749671s ago: executing program 2 (id=1192): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x300) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x1f) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x2000c094) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000cd2f2b87f03b5f44b5ad2d4d35539762016f0491de40", @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="08009f00040000000500180112000000050018011b000000080026006c090000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 4.095130383s ago: executing program 0 (id=1193): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xffff) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) (async) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x208c, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 2.162114976s ago: executing program 2 (id=1194): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') timer_create(0x5, &(0x7f0000000280)={0x0, 0x200003e, 0x1, @thr={&(0x7f00000001c0)="aa40d7dd5a20fa36a04b7593adb9e67e9fe9f955e2a7605b77c80d4d0815f973540989267733624052b9e6b619b4b03a8d27e12371dea9b33df3c5fba58b5eb7f39af31351f5e7cf7f08a6b70f60b3845702077da606da9548155342030730a28b5baa34451c517be2a493f561", &(0x7f0000000640)="a2099009e01987d711999ba65c92ca332b4304c6dd21812f6053c2185db7f2b35202fb13a72bf3aa92facf16f1990e95022d37f88f61be8b9371e4476428672eb0d6058805d9497d9fd032415b32007212c4bd821fd99813b980cfe05fa379dc4d99c06f18e48665c02e1fd369a254507e6aae999d5231e077c272dc9f188c02c8ef40afd478304f2a2fcba1f4e139d2d2f586a367222e11cd0b56717bd98246ff9b2df2c309a171e7d2ef9ebc42d4aa35b25312fb83cbec4629bfabff432606d2c9795c863e9312f4146763257eaad72c"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000005c0)={{r3, r4+10000000}}, &(0x7f0000000600)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f00000002c0)=0x1) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x40, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x800448d4, &(0x7f0000000100)={0x300, 0x1fe, '\x00\x00\b', 0x2, 0xf}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)={0x220, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1d4, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x13c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x18, 0x0, 0x1b, 0x30, 0x1, 0xb, 0x9, 0x6, 0x16, 0x30, 0xb, 0x6c, 0x48, 0x48, 0x48, 0x60, 0x3, 0x24, 0x48, 0x9, 0x6c8bcaddd4c9c57e, 0x48, 0x24, 0xc, 0x5, 0x60, 0x2]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x6}, {0x3, 0x3}, {0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x3}, {0x4, 0x3}, {0x4, 0x4}, {0x1, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x5, 0x7}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x4}, {0x7, 0x5}, {0x5, 0x5}, {0x6, 0x7}, {}, {0x0, 0x4}, {0x1, 0x3}, {}, {0x0, 0x9}, {0x3, 0x6}, {0x2, 0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x9}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x10, 0xff, 0x8001, 0x60, 0x629, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x41, 0xbaf9, 0x4, 0xd, 0x1ff, 0xf001, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4a80, 0x1000, 0x1, 0x7, 0x7, 0xffff, 0xfff, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x10, 0x3, 0x0, 0xe, 0x5, 0x1000, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc7cf, 0x2, 0x5, 0x1, 0x97b, 0xfc01, 0x6, 0x2]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x0, 0x8, 0x1, 0x4e, 0x2, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x7, 0x8000, 0xffff, 0x5, 0xfff4, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x78d3, 0xffff, 0x4, 0x600, 0xc, 0x9]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x3}, {0x0, 0xa}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0x5}, {0x4, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x4, 0x9}, {0x5, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x78}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x1f00, 0x1) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x4c, r12, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "76ba608753"}]}]}, @NL80211_ATTR_IE={0x4}]}, 0x4c}}, 0x20004800) 2.11134002s ago: executing program 3 (id=1195): ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[], 0x10) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12162, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000200"/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="090003000e3607b996a620f1a5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, r4, 0x8000000}, 0x38) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00') symlink(&(0x7f0000004500)='./file1/file0\x00', &(0x7f0000004540)='./file0\x00') execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000040)="76ea09000000", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1.977158858s ago: executing program 0 (id=1196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x300) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x1f) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x2000c094) socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000cd2f2b87f03b5f44b5ad2d4d35539762016f0491de40", @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="08009f00040000000500180112000000050018011b000000080026006c090000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 958.093577ms ago: executing program 0 (id=1197): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r1}}, 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x18}}], 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 939.876636ms ago: executing program 3 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 134.497748ms ago: executing program 3 (id=1199): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000400304c19700000000000109022e00010000002009040082010300000009210101000022050009058103"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x6b0240, 0x102) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002005b797a3100000000080041007369770014003300626f6e64300000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e", @ANYBLOB="0400130006001200000000000600b5008501"], 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) getpeername$inet6(r4, 0x0, &(0x7f0000000140)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x10) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x40200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1200): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) close_range(r3, r7, 0x0) poll(&(0x7f0000000140)=[{r8, 0x4002}], 0x1, 0x5) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/crypto\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000001000000000000000600000000000000000000000000000006000000b06b6e0001000000000000000c00150001000000ffff0000"], 0xc4}}, 0x0) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): .014051][ T9195] syz_tun: tun_net_xmit 86 [ 328.567955][ T5920] usb 3-1: config 0 descriptor?? [ 328.584437][ T5920] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 329.062981][ C0] syz_tun: tun_net_xmit 86 [ 329.065639][ T9203] lo speed is unknown, defaulting to 1000 [ 329.073540][ T9203] lo speed is unknown, defaulting to 1000 [ 329.082059][ T9203] lo speed is unknown, defaulting to 1000 [ 329.128278][ T9203] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 329.209829][ T9204] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 329.241554][ T9204] gretap1: entered allmulticast mode [ 329.522880][ T5920] gspca_sunplus: reg_w_riv err -110 [ 329.528173][ T5920] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 329.571007][ T9203] lo speed is unknown, defaulting to 1000 [ 329.577692][ T9203] lo speed is unknown, defaulting to 1000 [ 329.584158][ T9203] lo speed is unknown, defaulting to 1000 [ 329.590555][ T9203] lo speed is unknown, defaulting to 1000 [ 329.598021][ T9203] lo speed is unknown, defaulting to 1000 [ 330.014200][ T9212] CIFS: Unable to determine destination address [ 330.023237][ T9212] syz_tun: tun_net_xmit 86 [ 330.113040][ C0] syz_tun: tun_net_xmit 86 [ 330.135252][ T115] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 330.586361][ T115] usb 1-1: config 0 has an invalid interface number: 58 but max is 0 [ 330.606245][ T115] usb 1-1: config 0 has no interface number 0 [ 330.627265][ T115] usb 1-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 330.639815][ T115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.650997][ T115] usb 1-1: config 0 descriptor?? [ 330.712570][ T115] gspca_main: spca500-2.14.0 probing 041e:400a [ 330.905680][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.922559][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.003677][ T9218] CIFS: Unable to determine destination address [ 331.062997][ C0] syz_tun: tun_net_xmit 86 [ 331.491498][ T5884] usb 1-1: USB disconnect, device number 17 [ 331.544414][ T5945] usb 3-1: USB disconnect, device number 20 [ 331.624668][ T9221] CIFS: Unable to determine destination address [ 331.643650][ T9221] syz_tun: tun_net_xmit 86 [ 332.102962][ C0] syz_tun: tun_net_xmit 86 [ 332.663036][ C1] syz_tun: tun_net_xmit 86 [ 332.900075][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 332.973735][ T30] audit: type=1400 audit(1749646371.740:459): avc: denied { bind } for pid=9223 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 333.702974][ C1] syz_tun: tun_net_xmit 86 [ 333.857067][ T9246] CIFS: Unable to determine destination address [ 333.865944][ T9246] syz_tun: tun_net_xmit 86 [ 333.978278][ T30] audit: type=1400 audit(1749646372.730:460): avc: denied { remount } for pid=9244 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 334.035042][ T9245] netlink: 196 bytes leftover after parsing attributes in process `syz.0.889'. [ 334.678729][ T30] audit: type=1400 audit(1749646372.950:461): avc: denied { create } for pid=9239 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 334.903307][ C0] syz_tun: tun_net_xmit 86 [ 334.959194][ T30] audit: type=1400 audit(1749646373.090:462): avc: denied { create } for pid=9239 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 334.980028][ T30] audit: type=1400 audit(1749646373.300:463): avc: denied { sys_admin } for pid=9239 comm="syz.3.888" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 335.484578][ T9265] CIFS: Unable to determine destination address [ 335.503008][ T5884] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 335.943105][ C0] syz_tun: tun_net_xmit 86 [ 336.073617][ T9260] lo speed is unknown, defaulting to 1000 [ 336.249178][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 336.265664][ T5884] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.275614][ T5884] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 336.288521][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 336.295112][ T5884] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 336.304235][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.324187][ T9270] SELinux: failed to load policy [ 336.350451][ T5884] usb 4-1: config 0 descriptor?? [ 336.581425][ T30] audit: type=1400 audit(1749646375.360:464): avc: denied { getopt } for pid=9259 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 336.654134][ T9278] CIFS: Unable to determine destination address [ 336.661458][ T9278] syz_tun: tun_net_xmit 86 [ 337.064443][ T5884] lenovo 0003:17EF:60EE.001B: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 337.117316][ T5884] usb 4-1: USB disconnect, device number 24 [ 337.504564][ T9285] netlink: 52 bytes leftover after parsing attributes in process `syz.2.898'. [ 337.513629][ T5815] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 337.703015][ C0] syz_tun: tun_net_xmit 86 [ 337.957488][ T30] audit: type=1400 audit(1749646376.740:465): avc: denied { ioctl } for pid=9284 comm="syz.1.899" path="socket:[23186]" dev="sockfs" ino=23186 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 337.982122][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.208524][ T5815] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 338.395967][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.581811][ T5815] usb 5-1: Product: syz [ 338.590278][ T5815] usb 5-1: Manufacturer: syz [ 338.595092][ T5815] usb 5-1: SerialNumber: syz [ 338.602039][ T5815] usb 5-1: config 0 descriptor?? [ 338.709272][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 338.742964][ C0] syz_tun: tun_net_xmit 86 [ 338.835545][ T5815] mos7840 5-1:0.0: required endpoints missing [ 338.875852][ T30] audit: type=1400 audit(1749646377.660:466): avc: denied { ioctl } for pid=9295 comm="syz.1.901" path="socket:[22472]" dev="sockfs" ino=22472 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.901492][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.970393][ T9300] CIFS: Unable to determine destination address [ 338.978149][ T9300] syz_tun: tun_net_xmit 86 [ 339.082410][ T30] audit: type=1326 audit(1749646377.850:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2198e929 code=0x7ffc0000 [ 339.321685][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.330171][ T30] audit: type=1326 audit(1749646377.860:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2198e929 code=0x7ffc0000 [ 339.330213][ T30] audit: type=1326 audit(1749646377.860:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c2198e929 code=0x7ffc0000 [ 339.330254][ T30] audit: type=1326 audit(1749646378.100:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2198e929 code=0x7ffc0000 [ 339.330292][ T30] audit: type=1326 audit(1749646378.100:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2198e929 code=0x7ffc0000 [ 339.330330][ T30] audit: type=1326 audit(1749646378.100:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f4c2198e929 code=0x7ffc0000 [ 339.330367][ T30] audit: type=1326 audit(1749646378.100:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2198e929 code=0x7ffc0000 [ 339.330402][ T30] audit: type=1326 audit(1749646378.100:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2198e929 code=0x7ffc0000 [ 339.433200][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.503598][ T30] audit: type=1326 audit(1749646378.100:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.4.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c2198e929 code=0x7ffc0000 [ 339.537292][ T5945] usb 5-1: USB disconnect, device number 20 [ 340.022984][ C1] syz_tun: tun_net_xmit 86 [ 340.241831][ T9314] syz_tun: tun_net_xmit 86 [ 340.254107][ T5920] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 340.803742][ T5920] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 340.824047][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.837526][ T5920] usb 5-1: config 0 descriptor?? [ 341.062953][ C1] syz_tun: tun_net_xmit 86 [ 341.067577][ T5815] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 341.151614][ T9324] FAULT_INJECTION: forcing a failure. [ 341.151614][ T9324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.164969][ T9324] CPU: 0 UID: 0 PID: 9324 Comm: syz.3.910 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 341.164984][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.164990][ T9324] Call Trace: [ 341.164994][ T9324] [ 341.164998][ T9324] dump_stack_lvl+0x16c/0x1f0 [ 341.165018][ T9324] should_fail_ex+0x512/0x640 [ 341.165036][ T9324] _copy_from_user+0x2e/0xd0 [ 341.165052][ T9324] kvm_arch_dev_ioctl+0x5a1/0x760 [ 341.165063][ T9324] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 341.165073][ T9324] ? do_vfs_ioctl+0x523/0x1a60 [ 341.165086][ T9324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 341.165101][ T9324] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 341.165118][ T9324] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 341.165133][ T9324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 341.165146][ T9324] kvm_dev_ioctl+0x787/0x1ad0 [ 341.165167][ T9324] ? hook_file_ioctl_common+0x145/0x410 [ 341.165178][ T9324] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 341.165197][ T9324] ? selinux_file_ioctl+0x180/0x270 [ 341.165211][ T9324] ? selinux_file_ioctl+0xb4/0x270 [ 341.165226][ T9324] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 341.165244][ T9324] __x64_sys_ioctl+0x18e/0x210 [ 341.165257][ T9324] do_syscall_64+0xcd/0x4c0 [ 341.165274][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.165285][ T9324] RIP: 0033:0x7fba7218e929 [ 341.165294][ T9324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.165304][ T9324] RSP: 002b:00007fba73000038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.165315][ T9324] RAX: ffffffffffffffda RBX: 00007fba723b5fa0 RCX: 00007fba7218e929 [ 341.165322][ T9324] RDX: 0000200000000300 RSI: 000000004018aee2 RDI: 0000000000000005 [ 341.165328][ T9324] RBP: 00007fba73000090 R08: 0000000000000000 R09: 0000000000000000 [ 341.165334][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.165340][ T9324] R13: 0000000000000000 R14: 00007fba723b5fa0 R15: 00007fff0f0162f8 [ 341.165354][ T9324] [ 341.374552][ C0] syz_tun: tun_net_xmit 86 [ 341.381790][ T9324] lo speed is unknown, defaulting to 1000 [ 341.431436][ T5920] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 341.474188][ T5884] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 341.492915][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 341.572412][ T5815] usb 3-1: too many configurations: 11, using maximum allowed: 8 [ 341.602127][ T5815] usb 3-1: config 4 has an invalid interface number: 199 but max is 0 [ 341.624426][ T9331] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 341.641205][ T5815] usb 3-1: config 4 has no interface number 0 [ 341.647832][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 341.656761][ T9331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.674233][ T5815] usb 3-1: config 4 has an invalid interface number: 199 but max is 0 [ 341.682426][ T5815] usb 3-1: config 4 has no interface number 0 [ 341.691602][ T5884] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 341.743920][ T5884] usb 2-1: config 0 has no interface number 0 [ 341.792762][ T5884] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 341.809015][ T9331] bond2: (slave veth3): Enslaving as an active interface with a down link [ 341.818281][ T5885] usb 5-1: USB disconnect, device number 21 [ 341.825435][ T5815] usb 3-1: config 4 has an invalid interface number: 199 but max is 0 [ 341.835982][ T5884] usb 2-1: config 0 interface 1 has no altsetting 0 [ 341.842662][ T5815] usb 3-1: config 4 has no interface number 0 [ 341.856799][ T5884] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 341.860872][ T9336] vlan2: entered allmulticast mode [ 341.866110][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.866131][ T5884] usb 2-1: Product: syz [ 341.866145][ T5884] usb 2-1: Manufacturer: syz [ 341.866159][ T5884] usb 2-1: SerialNumber: syz [ 341.896109][ T5815] usb 3-1: config 4 has an invalid interface number: 199 but max is 0 [ 341.897994][ T9336] veth1: entered allmulticast mode [ 341.911101][ T9336] veth1: entered promiscuous mode [ 341.911127][ T5884] usb 2-1: config 0 descriptor?? [ 341.917879][ T5815] usb 3-1: config 4 has no interface number 0 [ 341.930831][ T9336] veth1: left promiscuous mode [ 341.936993][ T5815] usb 3-1: config 4 has an invalid interface number: 199 but max is 0 [ 341.938344][ T9336] bond2: (slave vlan2): making interface the new active one [ 341.945468][ T5815] usb 3-1: config 4 has no interface number 0 [ 341.955769][ T9336] veth1: entered promiscuous mode [ 341.964560][ T9336] vlan2: entered promiscuous mode [ 341.970286][ T9336] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 341.981082][ T5815] usb 3-1: config 4 has an invalid interface number: 199 but max is 0 [ 341.997820][ T5815] usb 3-1: config 4 has no interface number 0 [ 342.023416][ T5815] usb 3-1: config 4 has an invalid interface number: 199 but max is 0 [ 342.031723][ T5815] usb 3-1: config 4 has no interface number 0 [ 342.049089][ T5815] usb 3-1: config 4 has an invalid interface number: 199 but max is 0 [ 342.057775][ T5815] usb 3-1: config 4 has no interface number 0 [ 342.082687][ T5815] usb 3-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=48.cb [ 342.100993][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.243372][ T5884] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 342.262556][ T5815] usb 3-1: Product: syz [ 342.272246][ T5884] cx231xx 2-1:0.1: Failed to read PCB config [ 342.331142][ T9341] CIFS: Unable to determine destination address [ 342.338621][ T9341] syz_tun: tun_net_xmit 86 [ 342.423030][ C0] syz_tun: tun_net_xmit 86 [ 342.718178][ T5815] usb 3-1: Manufacturer: syz [ 342.759981][ T5815] usb 3-1: SerialNumber: syz [ 342.765085][ T5884] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 342.781020][ T5884] usb 2-1: USB disconnect, device number 25 [ 343.108136][ T5815] ipw 3-1:4.199: IPWireless converter converter detected [ 343.382959][ C1] syz_tun: tun_net_xmit 86 [ 343.407279][ T5884] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 343.426476][ T5815] usb 3-1: USB disconnect, device number 21 [ 343.439558][ T5815] ipw 3-1:4.199: device disconnected [ 343.572919][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 343.580001][ T5884] usb 2-1: config 0 has an invalid interface number: 203 but max is 0 [ 343.589000][ T5884] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 343.597787][ T5884] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 343.606139][ T5884] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 343.615376][ T5884] usb 2-1: config 0 has no interface number 0 [ 343.621490][ T5884] usb 2-1: config 0 has no interface number 1 [ 343.628045][ T5884] usb 2-1: config 0 interface 203 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 343.639007][ T5884] usb 2-1: config 0 interface 203 altsetting 2 bulk endpoint 0xC has invalid maxpacket 64 [ 343.648955][ T5884] usb 2-1: config 0 interface 203 altsetting 2 bulk endpoint 0xE has invalid maxpacket 16 [ 343.658903][ T5884] usb 2-1: config 0 interface 203 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 343.669770][ T5884] usb 2-1: config 0 interface 203 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 343.681647][ T5884] usb 2-1: config 0 interface 203 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 343.694835][ T5884] usb 2-1: too many endpoints for config 0 interface 110 altsetting 206: 149, using maximum allowed: 30 [ 343.706113][ T5884] usb 2-1: config 0 interface 110 altsetting 206 has 1 endpoint descriptor, different from the interface descriptor's value: 149 [ 343.719549][ T5884] usb 2-1: config 0 interface 203 has no altsetting 0 [ 343.733785][ T5884] usb 2-1: config 0 interface 110 has no altsetting 0 [ 343.746549][ T5884] usb 2-1: New USB device found, idVendor=052b, idProduct=1507, bcdDevice=d7.e9 [ 343.757046][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.772570][ T5884] usb 2-1: Product: syz [ 343.778593][ T5884] usb 2-1: Manufacturer: syz [ 343.802929][ T5884] usb 2-1: SerialNumber: syz [ 344.129351][ T5884] usb 2-1: config 0 descriptor?? [ 344.230483][ T5884] usb 2-1: can't set config #0, error -71 [ 344.258724][ T5884] usb 2-1: USB disconnect, device number 26 [ 344.422956][ C1] syz_tun: tun_net_xmit 86 [ 344.475990][ T9365] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 345.311586][ T9373] hub 8-0:1.0: USB hub found [ 345.318303][ T9373] hub 8-0:1.0: 1 port detected [ 345.741176][ T9388] CIFS: Unable to determine destination address [ 345.748881][ T9388] syz_tun: tun_net_xmit 86 [ 345.754294][ T5884] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 346.219457][ T5884] usb 5-1: config index 0 descriptor too short (expected 46, got 36) [ 346.240224][ T5884] usb 5-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.252466][ T5884] usb 5-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.265762][ T5884] usb 5-1: config 0 interface 0 has no altsetting 0 [ 346.272560][ T5884] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 346.284551][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.416127][ T5884] usb 5-1: config 0 descriptor?? [ 346.453422][ T5884] usbhid 5-1:0.0: can't add hid device: -22 [ 346.460114][ T5884] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 346.716250][ T9381] siw: device registration error -23 [ 346.822947][ C1] syz_tun: tun_net_xmit 86 [ 347.464924][ T5920] usb 5-1: USB disconnect, device number 22 [ 347.872970][ C1] syz_tun: tun_net_xmit 86 [ 348.724770][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 348.724799][ T30] audit: type=1326 audit(1749646387.410:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867b78e929 code=0x7fc00000 [ 348.853667][ T30] audit: type=1326 audit(1749646387.410:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f867b78e929 code=0x7fc00000 [ 348.971609][ T30] audit: type=1326 audit(1749646387.410:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867b78e929 code=0x7fc00000 [ 349.032949][ T30] audit: type=1326 audit(1749646387.410:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867b78e929 code=0x7fc00000 [ 349.114273][ T30] audit: type=1326 audit(1749646387.410:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867b78e929 code=0x7fc00000 [ 349.368228][ T30] audit: type=1326 audit(1749646387.410:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867b78e929 code=0x7fc00000 [ 350.062990][ T5884] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 350.443106][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 350.457789][ T5884] usb 5-1: config 0 has an invalid interface number: 234 but max is 0 [ 350.468567][ T5884] usb 5-1: config 0 has no interface number 0 [ 350.494890][ T5884] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= d.5e [ 350.522865][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.542836][ T5884] usb 5-1: Product: syz [ 350.547009][ T5884] usb 5-1: Manufacturer: syz [ 350.566293][ T5884] usb 5-1: SerialNumber: syz [ 350.582438][ T5884] usb 5-1: config 0 descriptor?? [ 350.845259][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.853970][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.680737][ T30] audit: type=1326 audit(1749646390.020:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.0.942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f867b78e929 code=0x0 [ 352.010078][ T30] audit: type=1400 audit(1749646390.790:489): avc: denied { module_request } for pid=9465 comm="syz.3.946" kmod="crypto-drbg_nopr_hmac_sha1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 352.034367][ T5815] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 352.220940][ T5815] usb 1-1: config index 0 descriptor too short (expected 46, got 36) [ 352.293589][ T5815] usb 1-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.394009][ T5815] usb 1-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.404374][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.411127][ T5815] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 352.420586][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.432676][ T5920] usb 5-1: USB disconnect, device number 23 [ 352.457719][ T5815] usb 1-1: config 0 descriptor?? [ 352.473092][ T5815] usbhid 1-1:0.0: can't add hid device: -22 [ 352.487565][ T5815] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 352.492931][ T5945] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 352.632963][ T5945] usb 4-1: device descriptor read/64, error -71 [ 353.303063][ T5945] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 353.447216][ T5815] usb 1-1: USB disconnect, device number 18 [ 353.513048][ T5945] usb 4-1: device descriptor read/64, error -71 [ 353.643809][ T5945] usb usb4-port1: attempt power cycle [ 354.177507][ T30] audit: type=1326 audit(1749646392.570:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9485 comm="syz.2.950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f692d58e929 code=0x0 [ 354.573011][ T5945] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 354.707453][ T30] audit: type=1326 audit(1749646393.280:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.0.953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f867b78e929 code=0x0 [ 354.747571][ T9497] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 354.759818][ T5945] usb 4-1: device descriptor read/8, error -71 [ 354.779465][ T9497] team0: Port device hsr_slave_0 added [ 355.033054][ T42] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 355.056859][ T5945] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 355.276674][ T5945] usb 4-1: device descriptor read/8, error -71 [ 355.304076][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 355.313905][ T42] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 355.384592][ T9510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.426091][ T5945] usb usb4-port1: unable to enumerate USB device [ 356.169239][ T42] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.184343][ T42] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 356.195347][ T42] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.209446][ T42] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 356.220484][ T42] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.242862][ T42] usb 3-1: string descriptor 0 read error: -22 [ 356.249167][ T42] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 356.258406][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.295671][ T42] adutux 3-1:168.0: interrupt endpoints not found [ 356.377787][ T30] audit: type=1400 audit(1749646395.160:492): avc: denied { create } for pid=9519 comm="syz.0.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 356.651430][ T5059] vlan2: left promiscuous mode [ 357.092265][ T9531] CIFS: Unable to determine destination address [ 357.099390][ T9531] syz_tun: tun_net_xmit 86 [ 357.163266][ T30] audit: type=1400 audit(1749646395.870:493): avc: denied { write } for pid=9499 comm="syz.2.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 357.267362][ T5945] usb 3-1: USB disconnect, device number 22 [ 357.305180][ T9534] SELinux: failed to load policy [ 357.346267][ T9534] binder: BINDER_SET_CONTEXT_MGR already set [ 357.354507][ T9534] binder: 9532:9534 ioctl 4018620d 200000000100 returned -16 [ 357.510892][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 357.689268][ T42] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 358.113426][ C0] syz_tun: tun_net_xmit 86 [ 358.214797][ T9551] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 358.472872][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 358.494204][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.512382][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.652859][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.676124][ T42] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 358.688290][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.888777][ T42] usb 5-1: config 0 descriptor?? [ 359.019298][ T9559] CIFS: Unable to determine destination address [ 359.027340][ T9559] syz_tun: tun_net_xmit 86 [ 359.143034][ C0] syz_tun: tun_net_xmit 86 [ 359.894547][ T42] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 359.952057][ T42] microsoft 0003:045E:07DA.001D: No inputs registered, leaving [ 360.000317][ T42] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 360.057985][ T42] microsoft 0003:045E:07DA.001D: no inputs found [ 360.070164][ T42] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 360.099717][ T42] usb 5-1: USB disconnect, device number 24 [ 360.102930][ C0] syz_tun: tun_net_xmit 86 [ 360.202899][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 360.362847][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 360.375445][ T10] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 360.383547][ T10] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 360.404963][ T10] usb 1-1: config 6 has no interface number 0 [ 360.411089][ T10] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 360.429193][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 360.438582][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.450138][ T10] usb 1-1: Product: syz [ 360.519871][ T10] usb 1-1: Manufacturer: syz [ 360.524547][ T10] usb 1-1: SerialNumber: syz [ 360.533916][ T10] hso 1-1:6.2: Failed to find INT IN ep [ 360.691119][ T9580] SELinux: failed to load policy [ 360.726672][ T9580] binder: BINDER_SET_CONTEXT_MGR already set [ 360.732671][ T9580] binder: 9579:9580 ioctl 4018620d 200000000100 returned -16 [ 360.922629][ T5945] usb 1-1: USB disconnect, device number 19 [ 360.939087][ T115] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 361.123226][ T115] usb 4-1: Using ep0 maxpacket: 8 [ 361.139288][ T115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.150401][ C0] syz_tun: tun_net_xmit 86 [ 361.169399][ T115] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.190578][ T115] usb 4-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00 [ 361.201355][ T115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.230654][ T115] usb 4-1: config 0 descriptor?? [ 361.393942][ T1111] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.484797][ T1111] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.620906][ T30] audit: type=1400 audit(1749646400.400:494): avc: denied { append } for pid=9604 comm="syz.2.988" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 361.690722][ T1111] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.794069][ T1111] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.829476][ T115] lenovo 0003:04B3:3103.001E: item fetching failed at offset 8/9 [ 361.837935][ T30] audit: type=1400 audit(1749646400.610:495): avc: denied { map } for pid=9613 comm="syz.0.991" path="/dev/vsock" dev="devtmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 361.871665][ T115] lenovo 0003:04B3:3103.001E: hid_parse failed [ 361.887482][ T115] lenovo 0003:04B3:3103.001E: probe with driver lenovo failed with error -22 [ 361.887705][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.896841][ T5945] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 361.916451][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.924717][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.929991][ T30] audit: type=1400 audit(1749646400.620:496): avc: denied { read } for pid=9613 comm="syz.0.991" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 361.955196][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.050390][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.058222][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.073100][ T5945] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 362.100728][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.106994][ T5884] usb 4-1: USB disconnect, device number 29 [ 362.120157][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.133467][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.142733][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.153035][ T30] audit: type=1400 audit(1749646400.620:497): avc: denied { open } for pid=9613 comm="syz.0.991" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 362.187296][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.194616][ T5945] usb 3-1: Product: syz [ 362.200690][ T5945] usb 3-1: Manufacturer: syz [ 362.206231][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.213489][ T5945] usb 3-1: SerialNumber: syz [ 362.220357][ T5945] usb 3-1: config 0 descriptor?? [ 362.227960][ T5945] hso 3-1:0.0: Not our interface [ 362.237921][ T30] audit: type=1400 audit(1749646401.010:498): avc: denied { mounton } for pid=9615 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 362.398672][ T1111] bridge_slave_1: left allmulticast mode [ 362.407028][ T1111] bridge_slave_1: left promiscuous mode [ 362.415335][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.447244][ T5945] usb 3-1: USB disconnect, device number 23 [ 362.488336][ T1111] bridge_slave_0: left allmulticast mode [ 362.510228][ T1111] bridge_slave_0: left promiscuous mode [ 362.520295][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.903341][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 363.153125][ T30] audit: type=1400 audit(1749646401.830:499): avc: denied { setopt } for pid=9632 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 363.501724][ T30] audit: type=1400 audit(1749646402.280:500): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 363.539473][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 363.562826][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.570868][ T10] usb 5-1: Product: syz [ 363.672854][ T10] usb 5-1: Manufacturer: syz [ 363.677487][ T10] usb 5-1: SerialNumber: syz [ 363.719535][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 363.777974][ T5920] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 364.041366][ T30] audit: type=1400 audit(1749646402.800:501): avc: denied { connect } for pid=9640 comm="syz.2.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 364.264059][ T5828] Bluetooth: hci0: command tx timeout [ 364.328329][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 364.393325][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.451094][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.593567][ T30] audit: type=1400 audit(1749646403.370:502): avc: denied { append } for pid=9656 comm="syz.2.998" name="usbmon5" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 364.632491][ T30] audit: type=1400 audit(1749646403.380:503): avc: denied { bind } for pid=9656 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 364.632847][ T9657] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 364.658873][ T9657] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 364.666503][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.685941][ T9657] vhci_hcd vhci_hcd.0: Device attached [ 364.699182][ T9661] vhci_hcd: connection closed [ 364.700766][ T5059] vhci_hcd: stop threads [ 364.717186][ T5059] vhci_hcd: release socket [ 364.725847][ T5059] vhci_hcd: disconnect device [ 364.781558][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.795776][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.805883][ T1111] bond0 (unregistering): Released all slaves [ 364.823817][ T5920] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 364.828041][ T1111] bond1 (unregistering): Released all slaves [ 364.830970][ T5920] ath9k_htc: Failed to initialize the device [ 364.847077][ T9615] lo speed is unknown, defaulting to 1000 [ 364.871682][ T5920] usb 5-1: ath9k_htc: USB layer deinitialized [ 364.951103][ T9644] syzkaller1: entered promiscuous mode [ 364.956729][ T9644] syzkaller1: entered allmulticast mode [ 365.390756][ T9676] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 365.620965][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.640049][ T5945] usb 5-1: USB disconnect, device number 25 [ 365.657178][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.686910][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.702423][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.018746][ T1111] veth1_macvtap: left promiscuous mode [ 366.026705][ T1111] veth0_macvtap: left promiscuous mode [ 366.033193][ T1111] veth1_vlan: left promiscuous mode [ 366.047089][ T1111] veth0_vlan: left promiscuous mode [ 366.069587][ T9702] block device autoloading is deprecated and will be removed. [ 366.342863][ T5828] Bluetooth: hci0: command tx timeout [ 366.901261][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 366.901276][ T30] audit: type=1400 audit(1749646405.680:509): avc: denied { create } for pid=9712 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 367.444086][ T30] audit: type=1400 audit(1749646406.230:510): avc: denied { write } for pid=9712 comm="syz.3.1007" path="socket:[25144]" dev="sockfs" ino=25144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 367.555008][ T9721] CIFS: Unable to determine destination address [ 367.555556][ T9717] IPVS: ip_vs_add_dest(): server weight less than zero [ 367.572970][ T9716] syz_tun: tun_net_xmit 86 [ 367.908354][ T5945] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 368.073307][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 368.094640][ T5945] usb 4-1: config 0 has no interfaces? [ 368.100134][ T5945] usb 4-1: New USB device found, idVendor=6ff6, idProduct=43f9, bcdDevice= 0.00 [ 368.126505][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.164160][ T5945] usb 4-1: config 0 descriptor?? [ 368.216580][ T1111] team0 (unregistering): Port device hsr_slave_0 removed [ 368.397280][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 368.422990][ T5828] Bluetooth: hci0: command tx timeout [ 368.439724][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 368.456760][ T5884] usb 4-1: USB disconnect, device number 30 [ 368.582991][ C0] syz_tun: tun_net_xmit 86 [ 368.603212][ T5945] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 368.782885][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 368.801097][ T9615] chnl_net:caif_netlink_parms(): no params data found [ 368.859846][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.888329][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.899668][ T5945] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.915047][ T5945] usb 1-1: config 0 interface 0 has no altsetting 0 [ 368.921713][ T5945] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 368.935440][ T9722] lo speed is unknown, defaulting to 1000 [ 368.941992][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.964166][ T5945] usb 1-1: config 0 descriptor?? [ 369.002021][ T9731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.229700][ T9615] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.241258][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.249099][ T9615] bridge_slave_0: entered allmulticast mode [ 369.256565][ T9615] bridge_slave_0: entered promiscuous mode [ 369.264957][ T9615] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.272157][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.279498][ T9615] bridge_slave_1: entered allmulticast mode [ 369.286469][ T9615] bridge_slave_1: entered promiscuous mode [ 369.520550][ T9615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.575262][ T5945] usbhid 1-1:0.0: can't add hid device: -71 [ 369.579615][ T9615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.590931][ T5945] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 369.622957][ C0] syz_tun: tun_net_xmit 86 [ 369.673691][ T5945] usb 1-1: USB disconnect, device number 20 [ 369.713208][ T9615] team0: Port device team_slave_0 added [ 369.863395][ T30] audit: type=1400 audit(1749646408.590:511): avc: denied { read write } for pid=9751 comm="syz.2.1014" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 369.978392][ T9615] team0: Port device team_slave_1 added [ 369.985689][ T30] audit: type=1400 audit(1749646408.590:512): avc: denied { ioctl open } for pid=9751 comm="syz.2.1014" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 370.411853][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.451198][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.503326][ T5828] Bluetooth: hci0: command tx timeout [ 370.540296][ T5945] IPVS: starting estimator thread 0... [ 370.564475][ T9615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.583188][ T42] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 370.599850][ T9776] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12288 sclass=netlink_xfrm_socket pid=9776 comm=syz.4.1019 [ 370.630877][ T9774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.638808][ T9773] IPVS: using max 43 ests per chain, 103200 per kthread [ 370.680099][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.702810][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.703085][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.777934][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.789240][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.789294][ T9615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.832177][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 370.842340][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.893305][ T42] usb 3-1: config 0 descriptor?? [ 371.160524][ T9615] hsr_slave_0: entered promiscuous mode [ 371.244643][ T9785] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 371.254612][ T9785] syz_tun: tun_net_xmit 86 [ 371.743958][ T42] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 371.761088][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001F/input/input14 [ 371.783564][ T9615] hsr_slave_1: entered promiscuous mode [ 372.262981][ C0] syz_tun: tun_net_xmit 86 [ 372.619624][ T42] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 372.966040][ T9806] (syz.2.1024,9806,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 372.974942][ T9806] (syz.2.1024,9806,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 373.063840][ T30] audit: type=1800 audit(1749646411.670:513): pid=9806 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1024" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 373.259428][ T9792] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 373.302941][ C0] syz_tun: tun_net_xmit 86 [ 373.576683][ T42] usb 3-1: USB disconnect, device number 24 [ 373.658119][ T30] audit: type=1400 audit(1749646411.740:514): avc: denied { mounton } for pid=9792 comm="syz.2.1024" path="/189/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 373.800508][ T30] audit: type=1400 audit(1749646411.800:515): avc: denied { name_bind 0x1000000 } for pid=9792 comm="syz.2.1024" path="socket:[25863]" dev="sockfs" ino=25863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.835229][ T9809] fido_id[9809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 374.888091][ T30] audit: type=1400 audit(1749646413.560:516): avc: denied { read } for pid=9838 comm="syz.2.1029" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 375.376042][ T30] audit: type=1400 audit(1749646413.560:517): avc: denied { open } for pid=9838 comm="syz.2.1029" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 375.417738][ T9845] syz.4.1030: attempt to access beyond end of device [ 375.417738][ T9845] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 375.582629][ T9615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.711751][ T9615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 375.809232][ T9615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 375.896887][ T9615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.275075][ T9883] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 376.766158][ T9615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.815769][ T9615] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.851458][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.859695][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.909528][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.916695][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.012165][ T9615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.060850][ T9885] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 377.073090][ T9615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.088417][ T9885] SELinux: failed to load policy [ 377.220577][ T9885] binder: BINDER_SET_CONTEXT_MGR already set [ 377.230018][ T9885] binder: 9884:9885 ioctl 4018620d 200000000100 returned -16 [ 377.546428][ T9615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.553555][ T5885] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 377.696574][ T9615] veth0_vlan: entered promiscuous mode [ 377.723139][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 377.732121][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.774379][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.804513][ T9615] veth1_vlan: entered promiscuous mode [ 377.824108][ T5885] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 377.849902][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.870721][ T9615] veth0_macvtap: entered promiscuous mode [ 377.879082][ T5885] usb 3-1: config 0 descriptor?? [ 377.912044][ T9615] veth1_macvtap: entered promiscuous mode [ 377.988673][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.068747][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.105024][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.117070][ T9920] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 378.203869][ T9615] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.215695][ T9615] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.247220][ T9615] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.334815][ T5885] hid (null): unknown global tag 0xe [ 378.365282][ T9615] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.409339][ T5885] macally 0003:060B:0001.0020: unknown main item tag 0x1 [ 378.502909][ T5885] macally 0003:060B:0001.0020: unknown global tag 0xe [ 378.509743][ T5885] macally 0003:060B:0001.0020: item 0 0 1 14 parsing failed [ 378.809470][ T30] audit: type=1400 audit(1749646417.570:518): avc: denied { search } for pid=9930 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.978934][ T5885] macally 0003:060B:0001.0020: probe with driver macally failed with error -22 [ 379.085408][ T5885] usb 3-1: USB disconnect, device number 25 [ 379.101248][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.110685][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.127349][ T30] audit: type=1400 audit(1749646417.630:519): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.247780][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.255674][ T30] audit: type=1400 audit(1749646417.630:520): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.255718][ T30] audit: type=1400 audit(1749646417.630:521): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.255758][ T30] audit: type=1400 audit(1749646417.650:522): avc: denied { map_create } for pid=9926 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 379.255793][ T30] audit: type=1400 audit(1749646417.650:523): avc: denied { map_read map_write } for pid=9926 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 379.348070][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.407145][ T30] audit: type=1400 audit(1749646417.800:524): avc: denied { create } for pid=9615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.481606][ T30] audit: type=1400 audit(1749646417.800:525): avc: denied { write } for pid=9615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.503586][ T30] audit: type=1400 audit(1749646417.800:526): avc: denied { read } for pid=9615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.532838][ T5815] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 379.967328][ T30] audit: type=1400 audit(1749646417.960:527): avc: denied { prog_load } for pid=9926 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 380.063885][ T5815] usb 4-1: device descriptor read/64, error -71 [ 380.389483][ T9960] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 380.893162][ T5815] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 381.112843][ T5815] usb 4-1: device descriptor read/64, error -71 [ 381.224102][ T5815] usb usb4-port1: attempt power cycle [ 381.459164][ T1111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.572887][ T5815] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 381.644375][ T5815] usb 4-1: device descriptor read/8, error -71 [ 381.690995][ T1111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.816364][ T1111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.930007][ T1111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.022997][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 382.033045][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 382.106655][ T5815] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 382.183005][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.215247][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.238329][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 382.251836][ T1111] bridge_slave_1: left allmulticast mode [ 382.262244][ T1111] bridge_slave_1: left promiscuous mode [ 382.269727][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.282159][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.290177][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.302093][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.310083][ T5815] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.323073][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.331351][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.340724][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.351736][ T5815] usb 4-1: config 0 descriptor?? [ 382.386854][ T1111] bridge_slave_0: left allmulticast mode [ 382.406147][ T1111] bridge_slave_0: left promiscuous mode [ 382.412668][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.639761][T10013] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 382.783106][ T5815] usbhid 4-1:0.0: can't add hid device: -71 [ 382.791729][ T5815] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 382.843340][ T5815] usb 4-1: USB disconnect, device number 34 [ 383.008056][T10024] CIFS: Unable to determine destination address [ 383.015059][T10024] syz_tun: tun_net_xmit 86 [ 383.410934][T10031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1056'. [ 383.855670][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 383.855686][ T30] audit: type=1400 audit(1749646422.640:594): avc: denied { create } for pid=10020 comm="syz.2.1055" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 384.022980][ C0] syz_tun: tun_net_xmit 86 [ 384.038381][ T30] audit: type=1400 audit(1749646422.810:595): avc: denied { read } for pid=10034 comm="syz.3.1057" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 384.060978][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.069552][ T30] audit: type=1400 audit(1749646422.810:596): avc: denied { open } for pid=10034 comm="syz.3.1057" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 384.093097][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.214415][ T30] audit: type=1400 audit(1749646422.990:597): avc: denied { setopt } for pid=10034 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 384.565880][ T5828] Bluetooth: hci0: command tx timeout [ 384.688692][ T30] audit: type=1400 audit(1749646423.000:598): avc: denied { read write } for pid=10034 comm="syz.3.1057" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 384.763010][ T30] audit: type=1400 audit(1749646423.000:599): avc: denied { open } for pid=10034 comm="syz.3.1057" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 384.842676][ T30] audit: type=1326 audit(1749646423.100:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10039 comm="syz.0.1058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f867b78e929 code=0x0 [ 385.032836][ T5945] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 385.032886][ T30] audit: type=1400 audit(1749646423.580:601): avc: denied { setopt } for pid=10043 comm="syz.4.1059" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.062958][ C0] syz_tun: tun_net_xmit 86 [ 385.133151][ T30] audit: type=1400 audit(1749646423.920:602): avc: denied { create } for pid=10049 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 385.180600][ T30] audit: type=1400 audit(1749646423.920:603): avc: denied { create } for pid=10049 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 385.438075][ T5945] usb 5-1: config 0 has an invalid interface number: 26 but max is 0 [ 385.446458][ T5945] usb 5-1: config 0 has no interface number 0 [ 385.464674][ T5945] usb 5-1: config 0 interface 26 has no altsetting 0 [ 385.501965][ T5945] usb 5-1: New USB device found, idVendor=0c45, idProduct=6001, bcdDevice=aa.93 [ 385.532102][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.586127][ T5945] usb 5-1: Product: syz [ 385.607512][ T5945] usb 5-1: Manufacturer: syz [ 385.637507][ T5945] usb 5-1: SerialNumber: syz [ 385.668088][ T5945] usb 5-1: config 0 descriptor?? [ 385.773239][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.800061][T10063] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 385.844666][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.869280][T10060] kvm: pic: non byte read [ 385.939279][ T1111] bond0 (unregistering): Released all slaves [ 386.061118][T10060] kvm: pic: level sensitive irq not supported [ 386.061229][T10060] kvm: pic: non byte read [ 386.072319][T10060] kvm: pic: level sensitive irq not supported [ 386.072395][T10060] kvm: pic: non byte read [ 386.210956][ T5945] gspca_main: sonixb-2.14.0 probing 0c45:6001 [ 386.221489][ T5945] sonixb 5-1:0.26: Error reading register 00: -71 [ 386.261613][ T9998] lo speed is unknown, defaulting to 1000 [ 386.268946][ T5945] usb 5-1: USB disconnect, device number 26 [ 386.752889][ T5828] Bluetooth: hci0: command tx timeout [ 387.087209][T10079] netlink: 'syz.0.1063': attribute type 26 has an invalid length. [ 387.209011][ T1111] hsr_slave_0: left promiscuous mode [ 387.237920][ T1111] hsr_slave_1: left promiscuous mode [ 387.299897][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.338815][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.434583][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.449133][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.477253][ T1111] veth1_macvtap: left promiscuous mode [ 387.486282][ T1111] veth0_macvtap: left promiscuous mode [ 387.498145][ T1111] veth1_vlan: left promiscuous mode [ 387.511600][ T1111] veth0_vlan: left promiscuous mode [ 388.903084][ T5828] Bluetooth: hci0: command tx timeout [ 389.162704][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 389.210900][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 389.663138][ T5884] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 389.842985][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 389.859509][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.889068][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.929809][ T5884] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 389.946620][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.964574][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 389.964589][ T30] audit: type=1400 audit(1749646428.750:621): avc: denied { ioctl } for pid=10127 comm="syz.2.1074" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.997000][ T5884] usb 4-1: config 0 descriptor?? [ 390.018951][ T30] audit: type=1400 audit(1749646428.800:622): avc: denied { module_request } for pid=9998 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 390.076468][ T30] audit: type=1400 audit(1749646428.800:623): avc: denied { set_context_mgr } for pid=10127 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 390.142346][ T9998] chnl_net:caif_netlink_parms(): no params data found [ 390.171301][ T30] audit: type=1400 audit(1749646428.800:624): avc: denied { write } for pid=10127 comm="syz.2.1074" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 390.197353][T10129] SELinux: failed to load policy [ 390.216641][ T30] audit: type=1400 audit(1749646428.800:625): avc: denied { map } for pid=10127 comm="syz.2.1074" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 390.244935][ T30] audit: type=1400 audit(1749646428.840:626): avc: denied { create } for pid=10134 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 390.293771][T10129] binder: BINDER_SET_CONTEXT_MGR already set [ 390.299796][T10129] binder: 10127:10129 ioctl 4018620d 200000000100 returned -16 [ 390.354801][ T30] audit: type=1400 audit(1749646428.840:627): avc: denied { bind } for pid=10134 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 390.374611][ T30] audit: type=1400 audit(1749646428.920:628): avc: denied { load_policy } for pid=10127 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 390.402603][ T30] audit: type=1400 audit(1749646429.060:629): avc: denied { call } for pid=10127 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 390.442532][ T5884] aquacomputer_d5next 0003:0C70:F00A.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.3-1/input0 [ 390.451153][ T30] audit: type=1400 audit(1749646429.100:630): avc: denied { create } for pid=10127 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 390.631114][ T9998] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.705518][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.846669][ T9998] bridge_slave_0: entered allmulticast mode [ 390.875803][ T5920] usb 4-1: USB disconnect, device number 35 [ 390.890148][ T9998] bridge_slave_0: entered promiscuous mode [ 390.920872][T10150] fido_id[10150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 390.983234][ T5828] Bluetooth: hci0: command tx timeout [ 391.039981][ T9998] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.071596][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.109065][ T9998] bridge_slave_1: entered allmulticast mode [ 391.131528][ T9998] bridge_slave_1: entered promiscuous mode [ 391.150908][T10153] overlay: ./file1 is not a directory [ 391.266441][ T9998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.297365][ T9998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.577676][ T9998] team0: Port device team_slave_0 added [ 391.589174][T10168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.533686][T10170] hugetlbfs: syz.3.1083 (10170): Using mlock ulimits for SHM_HUGETLB is obsolete [ 392.921004][T10166] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 392.921004][T10166] program syz.0.1081 not setting count and/or reply_len properly [ 392.988644][ T1111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.097521][ T9998] team0: Port device team_slave_1 added [ 393.609125][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.620068][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.628349][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.637685][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.645772][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 393.686406][ T1111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.699295][T10184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1086'. [ 393.730991][T10184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10184 comm=syz.2.1086 [ 393.777547][ T1111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.870200][ T9998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.882680][ T9998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.941200][T10191] SELinux: failed to load policy [ 393.946483][ T9998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.984198][T10191] binder: BINDER_SET_CONTEXT_MGR already set [ 393.990209][T10191] binder: 10190:10191 ioctl 4018620d 200000000100 returned -16 [ 394.084199][ T1111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.125458][ T9998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.149828][ T9998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.182822][ T5945] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 394.216980][ T9998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.349099][T10181] lo speed is unknown, defaulting to 1000 [ 394.368116][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.414387][T10209] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 394.464002][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 394.585227][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 394.689252][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 394.772404][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 394.803520][ T5945] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 394.815245][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 394.820607][ T9998] hsr_slave_0: entered promiscuous mode [ 394.823949][ T5945] usb 1-1: Product: syz [ 394.836055][ T9998] hsr_slave_1: entered promiscuous mode [ 394.836319][ T5945] usb 1-1: Manufacturer: syz [ 394.846728][ T5945] usb 1-1: SerialNumber: syz [ 394.862698][ T5945] usb 1-1: config 0 descriptor?? [ 395.096133][ T5945] radio-si470x 1-1:0.0: DeviceID=0x81ae ChipID=0x9876 [ 395.183239][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 395.183289][ T30] audit: type=1400 audit(1749646433.940:646): avc: denied { map } for pid=10212 comm="syz.3.1092" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 395.257850][ T1111] bridge_slave_1: left allmulticast mode [ 395.267321][ T1111] bridge_slave_1: left promiscuous mode [ 395.281924][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.292367][ T30] audit: type=1400 audit(1749646433.940:647): avc: denied { read write } for pid=10212 comm="syz.3.1092" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 395.322953][ T30] audit: type=1400 audit(1749646434.070:648): avc: denied { name_bind } for pid=10219 comm="syz.2.1093" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 395.326812][T10188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.364955][ T1111] bridge_slave_0: left allmulticast mode [ 395.370662][ T1111] bridge_slave_0: left promiscuous mode [ 395.416910][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.423396][T10188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.451022][ T5945] radio-si470x 1-1:0.0: software version 63, hardware version 110 [ 395.508452][ T30] audit: type=1400 audit(1749646434.260:649): avc: denied { create } for pid=10219 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 395.549604][ T30] audit: type=1400 audit(1749646434.260:650): avc: denied { ioctl } for pid=10219 comm="syz.2.1093" path="socket:[28853]" dev="sockfs" ino=28853 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 395.592191][ T30] audit: type=1400 audit(1749646434.330:651): avc: denied { sys_module } for pid=10219 comm="syz.2.1093" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 395.658810][ T5945] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 395.679492][ T30] audit: type=1400 audit(1749646434.450:652): avc: denied { create } for pid=10227 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 395.702910][ T5826] Bluetooth: hci3: command tx timeout [ 395.730953][T10228] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 395.923108][ T5945] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 396.007370][ T5945] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 396.178279][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.214989][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.219878][ T5945] usb 1-1: USB disconnect, device number 21 [ 396.233592][ T1111] bond0 (unregistering): Released all slaves [ 396.278305][T10228] team0: Device hsr_slave_0 failed to register rx_handler [ 396.771376][T10246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.114677][ T30] audit: type=1400 audit(1749646435.890:653): avc: denied { create } for pid=10241 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 397.487334][ T30] audit: type=1400 audit(1749646435.990:654): avc: denied { getopt } for pid=10241 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 397.570089][ T30] audit: type=1400 audit(1749646436.000:655): avc: denied { create } for pid=10241 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 397.782946][ T5826] Bluetooth: hci3: command tx timeout [ 398.072034][T10269] SELinux: syz.0.1101 (10269) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 398.267590][T10181] chnl_net:caif_netlink_parms(): no params data found [ 398.865078][ T1111] hsr_slave_0: left promiscuous mode [ 398.908771][ T1111] hsr_slave_1: left promiscuous mode [ 398.934450][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.962880][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.989417][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.997317][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.046581][ T1111] veth1_macvtap: left promiscuous mode [ 399.059812][ T1111] veth0_macvtap: left promiscuous mode [ 399.784480][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 399.815856][T10294] netlink: 'syz.3.1107': attribute type 10 has an invalid length. [ 399.830254][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 399.864368][ T5826] Bluetooth: hci3: command tx timeout [ 400.117973][T10301] Device name cannot be null; rc = [-22] [ 401.075486][T10294] team0: Device hsr_slave_0 failed to register rx_handler [ 401.280088][T10307] Device name cannot be null; rc = [-22] [ 401.986737][ T5826] Bluetooth: hci3: command tx timeout [ 402.086342][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 402.086372][ T30] audit: type=1400 audit(1749646440.860:661): avc: denied { bind } for pid=10321 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 402.426689][ T30] audit: type=1400 audit(1749646440.900:662): avc: denied { node_bind } for pid=10321 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 402.455498][ T30] audit: type=1400 audit(1749646441.230:663): avc: denied { create } for pid=10321 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 402.480415][ T30] audit: type=1400 audit(1749646441.230:664): avc: denied { unlink } for pid=10321 comm="syz.2.1112" name="#35" dev="tmpfs" ino=1188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 402.517681][ T30] audit: type=1400 audit(1749646441.240:665): avc: denied { mount } for pid=10321 comm="syz.2.1112" name="/" dev="overlay" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 402.923079][ T30] audit: type=1400 audit(1749646441.260:666): avc: denied { read } for pid=10321 comm="syz.2.1112" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 402.966232][ T30] audit: type=1400 audit(1749646441.260:667): avc: denied { open } for pid=10321 comm="syz.2.1112" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 402.996515][ T30] audit: type=1400 audit(1749646441.380:668): avc: denied { write } for pid=10321 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 403.041825][ T30] audit: type=1400 audit(1749646441.690:669): avc: denied { getopt } for pid=10325 comm="syz.0.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 403.063119][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.075538][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.092933][T10181] bridge_slave_0: entered allmulticast mode [ 403.100611][T10181] bridge_slave_0: entered promiscuous mode [ 403.210415][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.223133][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.234069][T10181] bridge_slave_1: entered allmulticast mode [ 403.258344][T10181] bridge_slave_1: entered promiscuous mode [ 403.259280][ T30] audit: type=1400 audit(1749646442.040:670): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 403.355809][T10181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.390441][T10181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.488812][T10181] team0: Port device team_slave_0 added [ 403.586074][T10181] team0: Port device team_slave_1 added [ 404.118291][T10181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.126459][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.188568][T10181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.229779][T10181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.242548][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.277487][T10181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.332125][ T9998] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.356655][ T9998] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.374680][T10181] hsr_slave_0: entered promiscuous mode [ 404.381545][T10181] hsr_slave_1: entered promiscuous mode [ 404.388611][T10181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.396569][T10181] Cannot create hsr debugfs directory [ 404.402300][ T9998] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 404.417812][ T9998] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 404.726817][ T9998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.740318][ T9998] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.796105][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.803281][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.880279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.887443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.241100][T10181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 405.282445][T10181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 405.295233][T10181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 405.304626][T10387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1121'. [ 405.330021][T10181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 405.431889][ T9998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.445033][ T42] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 405.553169][ T5884] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 405.560045][ T9998] veth0_vlan: entered promiscuous mode [ 405.572140][T10181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.609020][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 405.613792][ T9998] veth1_vlan: entered promiscuous mode [ 405.648115][ T42] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 405.651657][T10181] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.661092][ T42] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 405.674492][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 405.696967][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.704165][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.712127][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 405.724781][ T42] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 405.736256][ T5884] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 405.747677][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.754786][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.762342][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.770630][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 405.795102][ T42] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 405.812236][ T5884] usb 1-1: config 0 descriptor?? [ 405.821032][ T9998] veth0_macvtap: entered promiscuous mode [ 405.827338][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.865269][ T42] usb 3-1: config 0 descriptor?? [ 405.870224][ T9998] veth1_macvtap: entered promiscuous mode [ 406.254039][ T5884] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 406.271989][ T42] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 406.279342][T10181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.303138][ T5884] [drm:udl_init] *ERROR* Selecting channel failed [ 406.329651][T10181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.388714][ T9998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.404723][ T5884] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 406.428088][ T5884] [drm] Initialized udl on minor 2 [ 406.456705][ T5884] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 406.508146][ T9998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.517082][ T5884] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 406.526180][ T42] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 406.578356][ T9998] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.593991][ T42] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 406.611406][ T5884] usb 1-1: USB disconnect, device number 22 [ 406.620484][ T9998] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.630694][ T42] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 406.658511][ T9998] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.675613][ T9998] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.989334][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.017759][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.116030][T10181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.137956][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.178840][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.182880][ T115] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 407.262909][ T1917] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 407.353280][ T115] usb 1-1: device descriptor read/64, error -71 [ 407.425949][ T1917] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 407.457135][ T1917] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 407.480506][ T1917] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.490111][ T1917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.512688][T10423] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 407.523935][ T1917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.632965][ T115] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 407.776456][T10181] veth0_vlan: entered promiscuous mode [ 407.793063][ T115] usb 1-1: device descriptor read/64, error -71 [ 407.800401][ T1917] usb 4-1: USB disconnect, device number 36 [ 407.806973][T10181] veth1_vlan: entered promiscuous mode [ 407.861484][T10181] veth0_macvtap: entered promiscuous mode [ 407.877680][T10181] veth1_macvtap: entered promiscuous mode [ 407.896974][T10181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.913225][ T115] usb usb1-port1: attempt power cycle [ 407.923485][T10181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.939834][T10181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.949702][T10181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.961867][T10181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.972051][T10181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.115810][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.141338][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.263368][ T115] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 408.296513][ T1917] usb 3-1: USB disconnect, device number 26 [ 408.320052][ T115] usb 1-1: device descriptor read/8, error -71 [ 408.327896][ T1917] usblp0: removed [ 408.381297][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.481715][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.497986][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.582906][ T115] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 408.625606][ T115] usb 1-1: device descriptor read/8, error -71 [ 408.667915][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.833520][ T115] usb usb1-port1: unable to enumerate USB device [ 408.944332][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.077714][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.210743][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.221086][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.251803][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.260600][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.270093][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.404182][T10466] lo speed is unknown, defaulting to 1000 [ 409.726272][ T36] bridge_slave_1: left allmulticast mode [ 409.740058][ T36] bridge_slave_1: left promiscuous mode [ 409.771048][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.813823][ T36] bridge_slave_0: left allmulticast mode [ 409.829673][ T36] bridge_slave_0: left promiscuous mode [ 409.846314][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.242359][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 410.249561][ T30] audit: type=1400 audit(1749646449.010:680): avc: denied { create } for pid=10484 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 410.944708][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.957467][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.967687][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.995718][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.013781][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.056882][ T30] audit: type=1400 audit(1749646449.840:681): avc: denied { ioctl } for pid=10501 comm="syz.0.1130" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30302 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 411.322859][ T5828] Bluetooth: hci0: command tx timeout [ 411.535432][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.547304][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.558181][ T36] bond0 (unregistering): Released all slaves [ 411.578391][T10487] syz_tun: entered allmulticast mode [ 411.584510][T10487] syz_tun: left allmulticast mode [ 411.609641][T10501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.738470][ T30] audit: type=1400 audit(1749646450.510:682): avc: denied { connect } for pid=10510 comm="syz.3.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 411.753569][T10466] chnl_net:caif_netlink_parms(): no params data found [ 411.805078][ T30] audit: type=1400 audit(1749646450.550:683): avc: denied { write } for pid=10510 comm="syz.3.1132" path="socket:[30353]" dev="sockfs" ino=30353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 411.886581][T10499] lo speed is unknown, defaulting to 1000 [ 412.025712][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.037545][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.048990][T10466] bridge_slave_0: entered allmulticast mode [ 412.056830][T10466] bridge_slave_0: entered promiscuous mode [ 412.071015][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.079258][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.089868][T10466] bridge_slave_1: entered allmulticast mode [ 412.092908][ T5815] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 412.097402][T10466] bridge_slave_1: entered promiscuous mode [ 412.244107][ T36] hsr_slave_0: left promiscuous mode [ 412.259157][ T36] hsr_slave_1: left promiscuous mode [ 412.273019][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 412.275979][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.279491][ T5815] usb 4-1: config index 0 descriptor too short (expected 8192, got 68) [ 412.288987][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.303133][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.309745][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.310947][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.329005][ T5815] usb 4-1: config 0 has no interfaces? [ 412.340393][ T5815] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.491394][ T30] audit: type=1400 audit(1749646451.150:684): avc: denied { write } for pid=10533 comm="syz.2.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 412.537188][ T36] veth1_macvtap: left promiscuous mode [ 412.542744][ T36] veth0_macvtap: left promiscuous mode [ 412.550560][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 412.554689][ T36] veth1_vlan: left promiscuous mode [ 412.565505][ T36] veth0_vlan: left promiscuous mode [ 412.577307][ T5815] usb 4-1: SerialNumber: syz [ 412.633949][ T5815] usb 4-1: config 0 descriptor?? [ 412.925358][ T1127] tipc: Subscription rejected, illegal request [ 412.933067][ T30] audit: type=1400 audit(1749646451.710:685): avc: denied { read } for pid=10510 comm="syz.3.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 413.066706][ T5828] Bluetooth: hci3: command tx timeout [ 413.391291][ T5828] Bluetooth: hci0: command tx timeout [ 413.620778][ T36] team0 (unregistering): Port device team_slave_1 removed [ 413.665245][ T36] team0 (unregistering): Port device team_slave_0 removed [ 413.843211][ T30] audit: type=1400 audit(1749646452.620:686): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 414.848831][ T5815] usb 4-1: USB disconnect, device number 37 [ 414.913543][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.930458][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.954476][ T30] audit: type=1400 audit(1749646453.730:687): avc: denied { append } for pid=10580 comm="syz.3.1138" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 414.980052][ T30] audit: type=1400 audit(1749646453.730:688): avc: denied { bind } for pid=10580 comm="syz.3.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 414.999654][ T30] audit: type=1400 audit(1749646453.730:689): avc: denied { connect } for pid=10580 comm="syz.3.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.163014][ T5828] Bluetooth: hci3: command tx timeout [ 415.285711][T10466] team0: Port device team_slave_0 added [ 415.298070][T10466] team0: Port device team_slave_1 added [ 415.447725][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 415.447739][ T30] audit: type=1400 audit(1749646454.230:692): avc: denied { create } for pid=10591 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 415.478160][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.485934][ T5828] Bluetooth: hci0: command tx timeout [ 415.497117][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.535937][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.551317][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.557573][ T30] audit: type=1400 audit(1749646454.260:693): avc: denied { view } for pid=10591 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 415.561419][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.585863][ T30] audit: type=1400 audit(1749646454.280:694): avc: denied { create } for pid=10591 comm="syz.0.1141" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 415.649964][ T30] audit: type=1400 audit(1749646454.290:695): avc: denied { setattr } for pid=10591 comm="syz.0.1141" name="file1" dev="overlay" ino=1356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 415.652854][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.684306][ T5815] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 415.770655][T10499] chnl_net:caif_netlink_parms(): no params data found [ 415.786221][T10605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.844758][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 415.855921][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 415.871331][T10605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.890025][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 415.914521][ T5815] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 415.916103][T10466] hsr_slave_0: entered promiscuous mode [ 415.927208][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.935437][T10466] hsr_slave_1: entered promiscuous mode [ 415.952393][ T5815] usb 4-1: Product: syz [ 415.980302][ T5815] usb 4-1: Manufacturer: syz [ 415.986284][ T5815] usb 4-1: SerialNumber: syz [ 415.995909][ T5971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.009322][ T5815] usb 4-1: config 0 descriptor?? [ 416.021612][ T5815] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 416.120978][ T5971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.165575][T10499] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.173755][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.180926][T10499] bridge_slave_0: entered allmulticast mode [ 416.191658][T10499] bridge_slave_0: entered promiscuous mode [ 416.215358][ T5971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.231811][T10499] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.239302][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.246622][T10499] bridge_slave_1: entered allmulticast mode [ 416.253986][T10499] bridge_slave_1: entered promiscuous mode [ 416.288945][ T5971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.319114][T10499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.336389][T10499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.396159][T10499] team0: Port device team_slave_0 added [ 416.427354][T10499] team0: Port device team_slave_1 added [ 416.482428][ T1917] usb 4-1: USB disconnect, device number 38 [ 416.565588][ T30] audit: type=1400 audit(1749646455.350:696): avc: denied { read write } for pid=10622 comm="syz.0.1144" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 416.618468][ T30] audit: type=1400 audit(1749646455.350:697): avc: denied { open } for pid=10622 comm="syz.0.1144" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 416.726327][T10499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.739672][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.771136][T10499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.817319][T10499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.828343][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.857093][T10499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.946110][ T5971] bridge_slave_1: left allmulticast mode [ 416.952852][ T1917] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 416.962196][ T5971] bridge_slave_1: left promiscuous mode [ 416.968365][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.979811][ T5971] bridge_slave_0: left allmulticast mode [ 416.986848][ T5971] bridge_slave_0: left promiscuous mode [ 416.992607][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.108010][ T1917] usb 3-1: config index 0 descriptor too short (expected 46, got 36) [ 417.118833][ T1917] usb 3-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.130332][ T1917] usb 3-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.140314][ T1917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 417.147117][ T1917] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 417.156224][ T1917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.166722][ T1917] usb 3-1: config 0 descriptor?? [ 417.177492][ T1917] usbhid 3-1:0.0: can't add hid device: -22 [ 417.183552][ T1917] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 417.226290][ T5828] Bluetooth: hci3: command tx timeout [ 417.327720][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.338953][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.359826][ T5971] bond0 (unregistering): Released all slaves [ 417.461068][ T30] audit: type=1400 audit(1749646456.230:698): avc: denied { create } for pid=10641 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 417.529501][ T30] audit: type=1400 audit(1749646456.240:699): avc: denied { sys_admin } for pid=10641 comm="syz.3.1147" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 417.551047][ T5828] Bluetooth: hci0: command tx timeout [ 417.557440][ T30] audit: type=1400 audit(1749646456.280:700): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 417.578200][ T30] audit: type=1400 audit(1749646456.300:701): avc: denied { write } for pid=10629 comm="syz.2.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 417.649607][T10630] infiniband [yz1: RDMA CMA: cma_listen_on_dev, error -98 [ 417.667104][T10499] hsr_slave_0: entered promiscuous mode [ 417.683919][T10499] hsr_slave_1: entered promiscuous mode [ 417.703320][T10648] SELinux: failed to load policy [ 417.711271][T10499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.728805][T10499] Cannot create hsr debugfs directory [ 417.819295][T10648] binder: BINDER_SET_CONTEXT_MGR already set [ 417.990110][T10648] binder: 10647:10648 ioctl 4018620d 200000000100 returned -16 [ 418.360039][T10466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 418.377056][ T5884] usb 3-1: USB disconnect, device number 27 [ 418.508503][ T5971] hsr_slave_0: left promiscuous mode [ 418.522479][ T5971] hsr_slave_1: left promiscuous mode [ 418.625481][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.637120][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 418.650918][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.659824][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.126102][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.154817][ T5971] veth1_macvtap: left promiscuous mode [ 419.161030][ T5971] veth0_macvtap: left promiscuous mode [ 419.167375][ T5971] veth1_vlan: left promiscuous mode [ 419.173051][ T5971] veth0_vlan: left promiscuous mode [ 419.304062][ T5828] Bluetooth: hci3: command tx timeout [ 419.451168][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1153'. [ 420.451722][ T5971] team0 (unregistering): Port device team_slave_1 removed [ 420.489008][ T5971] team0 (unregistering): Port device team_slave_0 removed [ 420.789166][T10466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 420.814070][T10674] ip6erspan0: entered allmulticast mode [ 421.138248][T10683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.521730][T10466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 421.581938][T10466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 421.695603][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 421.695618][ T30] audit: type=1400 audit(1749646460.480:710): avc: denied { create } for pid=10701 comm="syz.2.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 421.816473][T10683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.883060][T10703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.013998][T10683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.483779][T10683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.760737][ T30] audit: type=1400 audit(1749646461.540:711): avc: denied { name_connect } for pid=10730 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 422.821837][T10683] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.844075][ T30] audit: type=1400 audit(1749646461.620:712): avc: denied { mounton } for pid=10730 comm="syz.2.1162" path="/234/file0" dev="tmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 422.866768][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.884792][T10683] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.908137][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.932409][T10683] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.957929][T10736] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 10736 comm: syz.2.1162) [ 422.995273][ T30] audit: type=1800 audit(1749646461.780:713): pid=10736 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1162" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=31622 res=0 errno=0 [ 423.019433][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.041166][T10683] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.052558][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.102159][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.109325][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.141122][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.148318][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.199080][T10499] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 423.208335][T10499] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 423.317506][T10499] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 423.329991][T10499] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.163561][T10763] delete_channel: no stack [ 424.193009][ T30] audit: type=1400 audit(1749646462.940:714): avc: denied { ioctl } for pid=10763 comm="syz.3.1166" path="socket:[32141]" dev="sockfs" ino=32141 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 424.217697][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.274371][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.304449][T10499] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.325115][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.332280][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.409758][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.416950][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.471573][T10777] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.478951][T10777] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.514195][T10777] bridge0: entered allmulticast mode [ 424.546318][T10772] bridge_slave_1: left allmulticast mode [ 424.559858][T10772] bridge_slave_1: left promiscuous mode [ 424.575637][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.625669][T10772] bridge_slave_0: left allmulticast mode [ 424.631444][T10772] bridge_slave_0: left promiscuous mode [ 424.639777][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.070976][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.236993][T10466] veth0_vlan: entered promiscuous mode [ 425.286621][T10466] veth1_vlan: entered promiscuous mode [ 425.368115][T10466] veth0_macvtap: entered promiscuous mode [ 425.401762][T10466] veth1_macvtap: entered promiscuous mode [ 425.462700][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.509377][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.644319][T10466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.665674][T10466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.742234][T10803] FAULT_INJECTION: forcing a failure. [ 425.742234][T10803] name failslab, interval 1, probability 0, space 0, times 0 [ 425.755199][T10803] CPU: 1 UID: 0 PID: 10803 Comm: syz.0.1170 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 425.755224][T10803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.755235][T10803] Call Trace: [ 425.755241][T10803] [ 425.755248][T10803] dump_stack_lvl+0x16c/0x1f0 [ 425.755279][T10803] should_fail_ex+0x512/0x640 [ 425.755308][T10803] should_failslab+0xc2/0x120 [ 425.755334][T10803] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 425.755357][T10803] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 425.755386][T10803] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 425.755413][T10803] idr_get_free+0x528/0xa30 [ 425.755448][T10803] idr_alloc_u32+0x190/0x2f0 [ 425.755474][T10803] ? __pfx_idr_alloc_u32+0x10/0x10 [ 425.755501][T10803] ? lock_acquire+0x179/0x350 [ 425.755533][T10803] idr_alloc_cyclic+0x10b/0x230 [ 425.755560][T10803] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 425.755582][T10803] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 425.755609][T10803] bpf_link_prime+0x6e/0x290 [ 425.755635][T10803] bpf_nf_link_attach+0x592/0xa70 [ 425.755661][T10803] ? __pfx_bpf_nf_link_attach+0x10/0x10 [ 425.755685][T10803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.755712][T10803] __sys_bpf+0x2961/0x4d80 [ 425.755735][T10803] ? rcu_is_watching+0x12/0xc0 [ 425.755759][T10803] ? __pfx___sys_bpf+0x10/0x10 [ 425.755779][T10803] ? __schedule+0x1181/0x5de0 [ 425.755803][T10803] ? ksys_write+0x190/0x250 [ 425.755847][T10803] ? fput+0x70/0xf0 [ 425.755862][T10803] ? ksys_write+0x1ac/0x250 [ 425.755889][T10803] __x64_sys_bpf+0x78/0xc0 [ 425.755912][T10803] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.755938][T10803] do_syscall_64+0xcd/0x4c0 [ 425.755966][T10803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.755983][T10803] RIP: 0033:0x7f867b78e929 [ 425.755998][T10803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.756014][T10803] RSP: 002b:00007f867c642038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.756036][T10803] RAX: ffffffffffffffda RBX: 00007f867b9b6160 RCX: 00007f867b78e929 [ 425.756048][T10803] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 000000000000001c [ 425.756058][T10803] RBP: 00007f867c642090 R08: 0000000000000000 R09: 0000000000000000 [ 425.756069][T10803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.756079][T10803] R13: 0000000000000000 R14: 00007f867b9b6160 R15: 00007fff8f7a0198 [ 425.756104][T10803] [ 425.918741][T10466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.031630][T10466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.059530][T10499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.169170][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.201030][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.274479][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.282364][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.579881][ T30] audit: type=1400 audit(1749646465.360:715): avc: denied { read write } for pid=10817 comm="syz.0.1171" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 426.645698][ T30] audit: type=1400 audit(1749646465.360:716): avc: denied { open } for pid=10817 comm="syz.0.1171" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 426.731043][ T30] audit: type=1400 audit(1749646465.410:717): avc: denied { ioctl } for pid=10817 comm="syz.0.1171" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 426.769443][T10499] veth0_vlan: entered promiscuous mode [ 426.783522][T10499] veth1_vlan: entered promiscuous mode [ 426.821667][T10499] veth0_macvtap: entered promiscuous mode [ 426.836526][T10499] veth1_macvtap: entered promiscuous mode [ 426.859636][T10499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.880482][T10499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.893334][ T5815] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 426.899242][T10499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.916084][T10499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.927969][T10499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.938156][T10499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.031454][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.041714][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.058027][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.081622][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.101887][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.109845][ T5815] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 427.129585][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.137062][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.155339][ T5815] usb 1-1: config 0 descriptor?? [ 427.331939][ T1138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.369124][ T24] kernel write not supported for file /uinput (pid: 24 comm: kworker/1:0) [ 427.583008][ T5815] playstation 0003:054C:0DF2.0022: item fetching failed at offset 3/5 [ 427.592101][ T5815] playstation 0003:054C:0DF2.0022: Parse failed [ 427.601753][ T5815] playstation 0003:054C:0DF2.0022: probe with driver playstation failed with error -22 [ 427.726903][ T1138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.010385][ T30] audit: type=1400 audit(1749646466.790:718): avc: denied { create } for pid=10864 comm="syz.3.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 428.382027][ T30] audit: type=1400 audit(1749646467.160:719): avc: denied { append } for pid=10817 comm="syz.0.1171" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 428.718289][ T1138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.325685][ T1138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.407569][ T30] audit: type=1400 audit(1749646468.180:720): avc: denied { ioctl } for pid=10890 comm="syz.3.1178" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 429.473975][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.495727][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 429.505727][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 429.519290][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 429.527665][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.546100][T10900] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1179'. [ 429.555267][T10900] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1179'. [ 429.564490][T10900] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1179'. [ 429.736527][T10897] lo speed is unknown, defaulting to 1000 [ 430.393709][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.403096][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.410914][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.420596][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.434763][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.700544][ T1138] bridge_slave_1: left allmulticast mode [ 430.719197][ T1138] bridge_slave_1: left promiscuous mode [ 430.740749][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.757317][ T5815] usb 1-1: USB disconnect, device number 27 [ 430.819848][T10924] fuse: Bad value for 'fd' [ 431.613896][ T1138] bridge_slave_0: left allmulticast mode [ 431.613919][ T1138] bridge_slave_0: left promiscuous mode [ 431.614102][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.622953][ T5828] Bluetooth: hci0: command tx timeout [ 432.504076][ T5828] Bluetooth: hci3: command tx timeout [ 432.686255][ T5920] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 432.781901][ T30] audit: type=1400 audit(1749646471.560:721): avc: denied { setopt } for pid=10943 comm="syz.3.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 432.854665][ T5920] usb 1-1: config index 0 descriptor too short (expected 46, got 36) [ 432.862877][ T5920] usb 1-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.877152][ T5920] usb 1-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.887425][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 432.892930][ T42] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 432.897901][ T5920] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 432.911208][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.929574][ T5920] usb 1-1: config 0 descriptor?? [ 432.941697][ T5920] usbhid 1-1:0.0: can't add hid device: -22 [ 432.949076][ T5920] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 432.995520][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.005498][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.015984][ T1138] bond0 (unregistering): Released all slaves [ 433.055971][T10908] lo speed is unknown, defaulting to 1000 [ 433.078691][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 433.085508][ T42] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 433.093940][ T42] usb 3-1: config 0 has no interface number 0 [ 433.100405][ T42] usb 3-1: config 0 interface 120 altsetting 246 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 433.114223][ T42] usb 3-1: config 0 interface 120 has no altsetting 0 [ 433.124789][ T42] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 433.134033][ T42] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 433.142128][ T42] usb 3-1: Product: syz [ 433.146782][ T42] usb 3-1: Manufacturer: syz [ 433.151389][ T42] usb 3-1: SerialNumber: syz [ 433.162048][ T42] usb 3-1: config 0 descriptor?? [ 433.290391][T10897] chnl_net:caif_netlink_parms(): no params data found [ 433.368770][ T24] usb 1-1: USB disconnect, device number 28 [ 433.772822][ T5828] Bluetooth: hci0: command tx timeout [ 434.101622][ T42] usb 3-1: USB disconnect, device number 28 [ 434.338279][ T1138] hsr_slave_0: left promiscuous mode [ 434.362999][ T1138] hsr_slave_1: left promiscuous mode [ 434.368433][ T30] audit: type=1400 audit(1749646473.140:722): avc: denied { read } for pid=10971 comm="syz.0.1190" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 434.393812][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.401309][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.423374][ T30] audit: type=1400 audit(1749646473.150:723): avc: denied { open } for pid=10971 comm="syz.0.1190" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 434.540692][ T30] audit: type=1400 audit(1749646473.310:724): avc: denied { append } for pid=10971 comm="syz.0.1190" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 434.568481][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.576070][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.593084][ T5828] Bluetooth: hci3: command tx timeout [ 434.625974][ T1138] veth1_macvtap: left promiscuous mode [ 434.633691][ T1138] veth0_macvtap: left promiscuous mode [ 434.648683][ T1138] veth1_vlan: left promiscuous mode [ 434.657330][ T1138] veth0_vlan: left promiscuous mode [ 434.994326][ T30] audit: type=1400 audit(1749646473.520:725): avc: denied { read } for pid=10971 comm="syz.0.1190" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 435.197679][ T30] audit: type=1400 audit(1749646473.550:726): avc: denied { ioctl } for pid=10971 comm="syz.0.1190" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 435.395678][ T30] audit: type=1400 audit(1749646474.150:727): avc: denied { cmd } for pid=10977 comm="syz.3.1191" path="socket:[33463]" dev="sockfs" ino=33463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 435.782957][ T5828] Bluetooth: hci0: command tx timeout [ 436.229509][ T30] audit: type=1400 audit(1749646474.950:728): avc: denied { execute_no_trans } for pid=10984 comm="syz.0.1193" path="/265/file2" dev="tmpfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 437.047980][ T5828] Bluetooth: hci3: command tx timeout [ 437.815515][ T30] audit: type=1326 audit(1749646476.590:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.3.1195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba7218e929 code=0x0 [ 438.489457][ T5828] Bluetooth: hci0: command tx timeout [ 438.872649][T11010] CIFS: Unable to determine destination address [ 438.881941][T11010] syz_tun: tun_net_xmit 86 [ 439.142829][ T5828] Bluetooth: hci3: command tx timeout [ 439.375545][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 439.427559][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 439.623316][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.682870][ T5920] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 439.834291][ T5920] usb 4-1: config index 0 descriptor too short (expected 46, got 36) [ 439.842612][ T5920] usb 4-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.854190][ T5920] usb 4-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.865110][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 439.871719][ T5920] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 439.881269][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.909306][ T5920] usb 4-1: config 0 descriptor?? [ 439.921632][ T5920] usbhid 4-1:0.0: can't add hid device: -22 [ 439.928093][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 440.137460][T11012] siw: device registration error -23 [ 452.519291][ T1301] ================================================================== [ 452.527381][ T1301] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 452.534563][ T1301] Read of size 1 at addr ffff88802a107490 by task aoe_tx0/1301 [ 452.542081][ T1301] [ 452.544386][ T1301] CPU: 1 UID: 0 PID: 1301 Comm: aoe_tx0 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 452.544401][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.544409][ T1301] Call Trace: [ 452.544413][ T1301] [ 452.544417][ T1301] dump_stack_lvl+0x116/0x1f0 [ 452.544436][ T1301] print_report+0xcd/0x680 [ 452.544451][ T1301] ? __virt_addr_valid+0x81/0x610 [ 452.544463][ T1301] ? __phys_addr+0xe8/0x180 [ 452.544475][ T1301] ? handle_tx+0x5dc/0x630 [ 452.544490][ T1301] kasan_report+0xe0/0x110 [ 452.544506][ T1301] ? handle_tx+0x5dc/0x630 [ 452.544523][ T1301] handle_tx+0x5dc/0x630 [ 452.544541][ T1301] dev_hard_start_xmit+0x94/0x740 [ 452.544557][ T1301] __dev_queue_xmit+0x7eb/0x43e0 [ 452.544572][ T1301] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.544588][ T1301] ? finish_task_switch.isra.0+0x221/0xc10 [ 452.544603][ T1301] ? rcu_is_watching+0x12/0xc0 [ 452.544616][ T1301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 452.544631][ T1301] ? __lock_acquire+0xb8a/0x1c90 [ 452.544648][ T1301] ? __lock_acquire+0xb8a/0x1c90 [ 452.544669][ T1301] ? do_raw_spin_lock+0x12c/0x2b0 [ 452.544680][ T1301] ? find_held_lock+0x2b/0x80 [ 452.544692][ T1301] ? skb_dequeue+0x126/0x180 [ 452.544704][ T1301] ? find_held_lock+0x2b/0x80 [ 452.544717][ T1301] ? rcu_is_watching+0x12/0xc0 [ 452.544731][ T1301] tx+0xcc/0x190 [ 452.544741][ T1301] ? __pfx_tx+0x10/0x10 [ 452.544750][ T1301] kthread+0x1e1/0x3e0 [ 452.544765][ T1301] ? find_held_lock+0x2b/0x80 [ 452.544777][ T1301] ? __pfx_kthread+0x10/0x10 [ 452.544793][ T1301] ? __pfx_default_wake_function+0x10/0x10 [ 452.544806][ T1301] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.544821][ T1301] ? __kthread_parkme+0x19e/0x250 [ 452.544837][ T1301] ? __pfx_kthread+0x10/0x10 [ 452.544851][ T1301] kthread+0x3c5/0x780 [ 452.544860][ T1301] ? __pfx_kthread+0x10/0x10 [ 452.544870][ T1301] ? rcu_is_watching+0x12/0xc0 [ 452.544882][ T1301] ? __pfx_kthread+0x10/0x10 [ 452.544891][ T1301] ret_from_fork+0x5d4/0x6f0 [ 452.544906][ T1301] ? __pfx_kthread+0x10/0x10 [ 452.544915][ T1301] ret_from_fork_asm+0x1a/0x30 [ 452.544929][ T1301] [ 452.544933][ T1301] [ 452.751507][ T1301] Allocated by task 7188: [ 452.755814][ T1301] kasan_save_stack+0x33/0x60 [ 452.760478][ T1301] kasan_save_track+0x14/0x30 [ 452.765137][ T1301] __kasan_kmalloc+0xaa/0xb0 [ 452.769704][ T1301] alloc_tty_struct+0x96/0x8c0 [ 452.774447][ T1301] tty_init_dev.part.0+0x1e/0x500 [ 452.779453][ T1301] tty_open+0xa50/0xf90 [ 452.783589][ T1301] chrdev_open+0x231/0x6a0 [ 452.787996][ T1301] do_dentry_open+0x741/0x1c10 [ 452.792753][ T1301] vfs_open+0x82/0x3f0 [ 452.796807][ T1301] path_openat+0x1de4/0x2cb0 [ 452.801398][ T1301] do_filp_open+0x20b/0x470 [ 452.805893][ T1301] do_sys_openat2+0x11b/0x1d0 [ 452.810545][ T1301] __x64_sys_openat+0x174/0x210 [ 452.815387][ T1301] do_syscall_64+0xcd/0x4c0 [ 452.819884][ T1301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.825771][ T1301] [ 452.828070][ T1301] Freed by task 5870: [ 452.832021][ T1301] kasan_save_stack+0x33/0x60 [ 452.836678][ T1301] kasan_save_track+0x14/0x30 [ 452.841332][ T1301] kasan_save_free_info+0x3b/0x60 [ 452.846331][ T1301] __kasan_slab_free+0x51/0x70 [ 452.851080][ T1301] kfree+0x2b4/0x4d0 [ 452.854950][ T1301] process_one_work+0x9cf/0x1b70 [ 452.859865][ T1301] worker_thread+0x6c8/0xf10 [ 452.864444][ T1301] kthread+0x3c5/0x780 [ 452.868483][ T1301] ret_from_fork+0x5d4/0x6f0 [ 452.873051][ T1301] ret_from_fork_asm+0x1a/0x30 [ 452.877795][ T1301] [ 452.880096][ T1301] Last potentially related work creation: [ 452.885783][ T1301] kasan_save_stack+0x33/0x60 [ 452.890434][ T1301] kasan_record_aux_stack+0xa7/0xc0 [ 452.895606][ T1301] insert_work+0x36/0x230 [ 452.899905][ T1301] __queue_work+0x97e/0x10f0 [ 452.904467][ T1301] queue_work_on+0x1a4/0x1f0 [ 452.909030][ T1301] release_tty+0x4de/0x5d0 [ 452.913426][ T1301] tty_release_struct+0xb7/0xe0 [ 452.918250][ T1301] tty_release+0xe2d/0x1430 [ 452.922730][ T1301] __fput+0x3ff/0xb70 [ 452.926693][ T1301] task_work_run+0x14d/0x240 [ 452.931254][ T1301] do_exit+0x864/0x2bd0 [ 452.935386][ T1301] do_group_exit+0xd3/0x2a0 [ 452.939872][ T1301] get_signal+0x2673/0x26d0 [ 452.944349][ T1301] arch_do_signal_or_restart+0x8f/0x7d0 [ 452.949868][ T1301] exit_to_user_mode_loop+0x84/0x110 [ 452.955128][ T1301] do_syscall_64+0x3f6/0x4c0 [ 452.959708][ T1301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.965592][ T1301] [ 452.967894][ T1301] The buggy address belongs to the object at ffff88802a107000 [ 452.967894][ T1301] which belongs to the cache kmalloc-cg-2k of size 2048 [ 452.982188][ T1301] The buggy address is located 1168 bytes inside of [ 452.982188][ T1301] freed 2048-byte region [ffff88802a107000, ffff88802a107800) [ 452.996140][ T1301] [ 452.998449][ T1301] The buggy address belongs to the physical page: [ 453.004830][ T1301] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a106000 pfn:0x2a100 [ 453.014862][ T1301] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 453.023336][ T1301] memcg:ffff888057bb0101 [ 453.027575][ T1301] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 453.036075][ T1301] page_type: f5(slab) [ 453.040033][ T1301] raw: 00fff00000000240 ffff88801b84b3c0 ffffea00015ede10 ffffea0000a4d410 [ 453.048590][ T1301] raw: ffff88802a106000 0000000000080006 00000000f5000000 ffff888057bb0101 [ 453.057154][ T1301] head: 00fff00000000240 ffff88801b84b3c0 ffffea00015ede10 ffffea0000a4d410 [ 453.065804][ T1301] head: ffff88802a106000 0000000000080006 00000000f5000000 ffff888057bb0101 [ 453.074453][ T1301] head: 00fff00000000003 ffffea0000a84001 00000000ffffffff 00000000ffffffff [ 453.083097][ T1301] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 453.091744][ T1301] page dumped because: kasan: bad access detected [ 453.098124][ T1301] page_owner tracks the page as allocated [ 453.103809][ T1301] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 62822735382, free_ts 38101223795 [ 453.125222][ T1301] post_alloc_hook+0x1c0/0x230 [ 453.129962][ T1301] get_page_from_freelist+0x1321/0x3890 [ 453.135481][ T1301] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 453.141346][ T1301] alloc_pages_mpol+0x1fb/0x550 [ 453.146172][ T1301] new_slab+0x23b/0x330 [ 453.150299][ T1301] ___slab_alloc+0xd9c/0x1940 [ 453.154945][ T1301] __slab_alloc.constprop.0+0x56/0xb0 [ 453.160285][ T1301] __kmalloc_noprof+0x2f2/0x510 [ 453.165109][ T1301] __register_sysctl_table+0xb3/0x1900 [ 453.170543][ T1301] __devinet_sysctl_register+0x1b9/0x360 [ 453.176153][ T1301] devinet_sysctl_register+0x17b/0x200 [ 453.181583][ T1301] inetdev_init+0x2b8/0x5a0 [ 453.186058][ T1301] inetdev_event+0xc5f/0x18a0 [ 453.190706][ T1301] notifier_call_chain+0xbc/0x410 [ 453.195720][ T1301] call_netdevice_notifiers_info+0xbe/0x140 [ 453.201588][ T1301] register_netdevice+0x182e/0x2270 [ 453.206758][ T1301] page last free pid 5527 tgid 5527 stack trace: [ 453.213055][ T1301] __free_frozen_pages+0x7fe/0x1180 [ 453.218225][ T1301] qlist_free_all+0x4d/0x120 [ 453.222795][ T1301] kasan_quarantine_reduce+0x195/0x1e0 [ 453.228241][ T1301] __kasan_slab_alloc+0x69/0x90 [ 453.233076][ T1301] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 453.238514][ T1301] getname_flags.part.0+0x4c/0x550 [ 453.243597][ T1301] getname_flags+0x93/0xf0 [ 453.247988][ T1301] do_sys_openat2+0xb8/0x1d0 [ 453.252554][ T1301] __x64_sys_openat+0x174/0x210 [ 453.257374][ T1301] do_syscall_64+0xcd/0x4c0 [ 453.261853][ T1301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.267720][ T1301] [ 453.270032][ T1301] Memory state around the buggy address: [ 453.275637][ T1301] ffff88802a107380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.283671][ T1301] ffff88802a107400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.291875][ T1301] >ffff88802a107480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.299903][ T1301] ^ [ 453.304472][ T1301] ffff88802a107500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.312503][ T1301] ffff88802a107580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.320533][ T1301] ================================================================== [ 453.328603][ T1301] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 453.335791][ T1301] CPU: 1 UID: 0 PID: 1301 Comm: aoe_tx0 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 453.347497][ T1301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.357528][ T1301] Call Trace: [ 453.360781][ T1301] [ 453.363689][ T1301] dump_stack_lvl+0x3d/0x1f0 [ 453.368364][ T1301] panic+0x71c/0x800 [ 453.372267][ T1301] ? __pfx_panic+0x10/0x10 [ 453.376678][ T1301] ? irqentry_exit+0x3b/0x90 [ 453.381249][ T1301] ? lockdep_hardirqs_on+0x7c/0x110 [ 453.386430][ T1301] ? handle_tx+0x5dc/0x630 [ 453.390844][ T1301] ? check_panic_on_warn+0x1f/0xb0 [ 453.395948][ T1301] ? handle_tx+0x5dc/0x630 [ 453.400352][ T1301] check_panic_on_warn+0xab/0xb0 [ 453.405286][ T1301] end_report+0x107/0x170 [ 453.409599][ T1301] kasan_report+0xee/0x110 [ 453.413995][ T1301] ? handle_tx+0x5dc/0x630 [ 453.418407][ T1301] handle_tx+0x5dc/0x630 [ 453.422635][ T1301] dev_hard_start_xmit+0x94/0x740 [ 453.427639][ T1301] __dev_queue_xmit+0x7eb/0x43e0 [ 453.432555][ T1301] ? lockdep_hardirqs_on+0x7c/0x110 [ 453.437734][ T1301] ? finish_task_switch.isra.0+0x221/0xc10 [ 453.443527][ T1301] ? rcu_is_watching+0x12/0xc0 [ 453.448290][ T1301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 453.453642][ T1301] ? __lock_acquire+0xb8a/0x1c90 [ 453.458560][ T1301] ? __lock_acquire+0xb8a/0x1c90 [ 453.463575][ T1301] ? do_raw_spin_lock+0x12c/0x2b0 [ 453.468572][ T1301] ? find_held_lock+0x2b/0x80 [ 453.473225][ T1301] ? skb_dequeue+0x126/0x180 [ 453.477795][ T1301] ? find_held_lock+0x2b/0x80 [ 453.482451][ T1301] ? rcu_is_watching+0x12/0xc0 [ 453.487195][ T1301] tx+0xcc/0x190 [ 453.490714][ T1301] ? __pfx_tx+0x10/0x10 [ 453.495014][ T1301] kthread+0x1e1/0x3e0 [ 453.499062][ T1301] ? find_held_lock+0x2b/0x80 [ 453.503714][ T1301] ? __pfx_kthread+0x10/0x10 [ 453.508282][ T1301] ? __pfx_default_wake_function+0x10/0x10 [ 453.514064][ T1301] ? lockdep_hardirqs_on+0x7c/0x110 [ 453.519239][ T1301] ? __kthread_parkme+0x19e/0x250 [ 453.524243][ T1301] ? __pfx_kthread+0x10/0x10 [ 453.528812][ T1301] kthread+0x3c5/0x780 [ 453.532861][ T1301] ? __pfx_kthread+0x10/0x10 [ 453.537437][ T1301] ? rcu_is_watching+0x12/0xc0 [ 453.542174][ T1301] ? __pfx_kthread+0x10/0x10 [ 453.546736][ T1301] ret_from_fork+0x5d4/0x6f0 [ 453.551303][ T1301] ? __pfx_kthread+0x10/0x10 [ 453.555868][ T1301] ret_from_fork_asm+0x1a/0x30 [ 453.560608][ T1301] [ 453.563828][ T1301] Kernel Offset: disabled [ 453.568142][ T1301] Rebooting in 86400 seconds..